Code Injection Vulnerability in NVIDIA Apex Python Component
CVE-2025-23295

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Nvidia Apex
Vendor
CVE Published:
13 August 2025

What is CVE-2025-23295?

A vulnerability exists in the Python component of NVIDIA Apex across all platforms that enables malicious users to perform code injection. By supplying specially crafted files, an attacker can exploit this flaw to execute arbitrary code, potentially leading to unauthorized privilege escalation, information leakage, and data manipulation. This risks the confidentiality, integrity, and availability of data within the affected systems.

Affected Version(s)

NVIDIA Apex All All versions before release 25.07

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23295
https://www.cve.org/CVERecord?id=CVE-2025-23295
https://nvidia.custhelp.com/app/answers/detail/a_id/5680

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-23295 : Code Injection Vulnerability in NVIDIA Apex Python Component