Permission Escalation Vulnerability in NVIDIA Project G-Assist
CVE-2025-23347

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Geforce
Nvidia Rtx, Quadro, Nvs
Tesla
Vendor
CVE Published:
23 October 2025

What is CVE-2025-23347?

NVIDIA Project G-Assist contains a flaw that allows attackers to escalate permissions. This vulnerability may result in unauthorized access, leading to code execution, privilege elevation, data tampering, and potential denial of service or information leakage. Users are advised to apply patches promptly to mitigate the risks associated with this vulnerability.

Affected Version(s)

GeForce Windows(R580) All driver versions prior to 581.42

NVIDIA RTX, Quadro, NVS Windows(R570) All driver versions prior to 573.76

NVIDIA RTX, Quadro, NVS Windows(R580) All driver versions prior to 581.42

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23347
https://www.cve.org/CVERecord?id=CVE-2025-23347
https://nvidia.custhelp.com/app/answers/detail/a_id/5703

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-23347 : Permission Escalation Vulnerability in NVIDIA Project G-Assist