Integer Overflow Vulnerability in NVIDIA GPU Display Driver for Windows
CVE-2025-33218

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Geforce
Rtx Pro, Rtx, Quadro
Tesla
Guest Driver
Vendor
CVE Published:
28 January 2026

What is CVE-2025-33218?

The NVIDIA GPU Display Driver for Windows has a critical vulnerability within its kernel mode layer (nvlddmkm.sys) that allows attackers to perpetrate an integer overflow. Successfully exploiting this flaw could enable malicious actors to execute arbitrary code, escalate their privileges within the system, tamper with data, cause a denial of service, or disclose sensitive information. It is crucial for users to stay updated with the latest patches and solutions provided by NVIDIA to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

GeForce Windows(R590) All driver versions prior to 591.59

Guest driver Windows(R535 vGPU 16) 539.56(All versions prior to and including vGPU software 16.12)

Guest driver Windows(R570 vGPU 18) 573.76(All versions prior to and including vGPU software 18.5)

References

https://nvd.nist.gov/vuln/detail/CVE-2025-33218
https://www.cve.org/CVERecord?id=CVE-2025-33218
https://nvidia.custhelp.com/app/answers/detail/a_id/5747

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.