Description
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Problem types
CWE-824 Access of Uninitialized Pointer
Product status
580.82.02(All versions up to and including the August 2025 release)
580.82.02(All versions prior to and including vGPU 19.1)
570.172.07(All versions prior to and including vGPU 18.4)
535.261.04(All versions prior to and including vGPU 16.11)
References
nvd.nist.gov/vuln/detail/CVE-2025-23352
www.cve.org/CVERecord?id=CVE-2025-23352
nvidia.custhelp.com/app/answers/detail/a_id/5703
