Nvidia Product Security Update Advisory

Overview

We have released security updates to fix vulnerabilities in Nvidia products. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-23242

NVIDIA Riva Version: ~2.18.0 (inclusive)

 

CVE-2025-23360

NVIDIA NeMo Framework Version: ~24.12 (excluded)

 

Resolved Vulnerabilities

Improper Access Control Vulnerability (CVE-2025-23242)
relative Path Traversal Vulnerability via Arbitrary File Write (CVE-2025-23360)

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
 

 

CVE-2025-23242

NVIDIA Riva Version: ~2.19.0

 

CVE-2025-23360

NVIDIA NeMo Framework version: 24.12

 

 

References

[1] Security Bulletin: NVIDIA Riva – March 2025
https://nvidia.custhelp.com/app/answers/detail/a_id/5625
[2] Security Bulletin: NVIDIA NeMo – March 2025
https://nvidia.custhelp.com/app/answers/detail/a_id/5623