NVIDIA Product Security Update Advisory

Overview

 

We have released a security update to fix vulnerabilities in NVIDIA products. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-23275

 

nvJPEG Versions: 13.0.0 and earlier
nvJPEG version: 25.less than 03

 

CVE-2025-23308, CVE-2025-23339

 

NVIDIA CUDA Toolkit Version: 13.0 or earlier
NVIDIA CUDA Toolkit Version: 12.9 Update 1 or earlier

 

CVE-2025-23309, CVE-2025-23347, CVE-2025-23280, CVE-2025-23282, CVE-2025-23352

 

NVIDIA GPU Display Driver

 

GeForce (Windows) Version: 581.42 or lower
NVIDIA RTX, Quadro, NVS (Windows) Version: 581.42 or lower
NVIDIA RTX, Quadro, NVS (Windows) Version: 573.76 or lower
NVIDIA RTX, Quadro, NVS (Windows) Version: 539.56 or lower
Tesla (Windows) Version: 581.42 or lower
Tesla (Windows) Version: Less than 573.76
Tesla (Windows) Version: Less than 539.56

 

GeForce (Linux) version: 580.95.05 or lower
GeForce (Linux) version: 570.195.03 or lower
GeForce (Linux) version: 535.274.02 or lower
NVIDIA RTX, Quadro, NVS (Linux) version: 580.95.05 or lower
NVIDIA RTX, Quadro, NVS (Linux) Version: 570.195.03 or lower
NVIDIA RTX, Quadro, NVS (Linux) version: 535.274.02 or lower
Tesla (Linux) Version: 580.95.05 and earlier
Tesla (Linux) Version: 570.195.03 or lower
Tesla (Linux) version: 535.274.02 or lower

 

NVIDIA vGPU Software

 

Guest driver (Windows) version: 19.1 or earlier
Guest driver (Windows) version: 18.4 or earlier
Guest driver (Windows) version: 16.11 or earlier

 

Guest driver (Linux) version: 19.1 or earlier
Guest driver (Linux) version: 18.4 or earlier
Guest driver (Linux) version: 16.11 or earlier

 

Virtual GPU Manager (XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu) Version: 19.1 or earlier
Virtual GPU Manager (XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu) Version: 18.4 and earlier
Virtual GPU Manager (XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu) Version: 16.11 or earlier

 

NVIDIA Cloud Gaming

 

Guest driver (Linux) version: August 2025 release or earlier
Virtual GPU Manager (Red Hat Enterprise Linux KVM, VMware vSphere) version: August 2025 release or earlier

 

 

Resolved Vulnerabilities

 

GPU Out-of-Bounds Write Vulnerability in NVIDIA CUDA Toolkit nvJPEG (CVE-2025-23275)
Heap-based Buffer Overflow Vulnerability in NVIDIA CUDA Toolkit nvdisasm (CVE-2025-23308)
Stack-based Buffer Overflow Vulnerability in NVIDIA CUDA Toolkit cuobjdump (CVE-2025-23339)
Uncontrolled DLL Loading Path Vulnerability in NVIDIA Display Driver (CVE-2025-23309)
Privilege Escalation Vulnerability in NVIDIA Project G-Assist (CVE-2025-23347)
Use-after-disable vulnerability in NVIDIA Display Driver for Linux (CVE-2025-23280)
Privilege escalation vulnerability in NVIDIA Display Driver for Linux (CVE-2025-23282)
Uninitialized pointer access vulnerability in Virtual GPU Manager (CVE-2025-23352)

 

 

Vulnerability Patches

Vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2025-23275

 

nvJPEG Version: 13.0.0
nvJPEG Version: 25.03

 

CVE-2025-23308, CVE-2025-23339

 

NVIDIA CUDA Toolkit Version: 13.0
NVIDIA CUDA Toolkit Version: 12.9 Update 1

 

CVE-2025-23309, CVE-2025-23347, CVE-2025-23280, CVE-2025-23282, CVE-2025-23352

 

NVIDIA GPU Display Driver

 

GeForce (Windows) Version: 581.42
NVIDIA RTX, Quadro, NVS (Windows) Version: 581.42
NVIDIA RTX, Quadro, NVS (Windows) Version: 573.76
NVIDIA RTX, Quadro, NVS (Windows) version: 539.56
Tesla (Windows) version: 581.42
Tesla (Windows) version: 573.76
Tesla (Windows) version: 539.56

 

GeForce (Linux) version: 580.95.05
GeForce (Linux) version: 570.195.03
GeForce (Linux) version: 535.274.02
NVIDIA RTX, Quadro, NVS (Linux) Version: 580.95.05
NVIDIA RTX, Quadro, NVS (Linux) version: 570.195.03
NVIDIA RTX, Quadro, NVS (Linux) version: 535.274.02
Tesla (Linux) version: 580.95.05
Tesla (Linux) version: 570.195.03
Tesla (Linux) version: 535.274.02

 

NVIDIA vGPU Software

 

Guest driver (Windows) version: 19.2
Guest driver (Windows) version: 18.5
Guest driver (Windows) version: 16.12
Guest driver (Linux) version: 19.2
Guest driver (Linux) version: 18.5
Guest driver (Linux) version: 16.12
Virtual GPU Manager (XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu) Version: 19.2
Virtual GPU Manager (XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu) version: 18.5
Virtual GPU Manager (XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu) version: 16.12

 

NVIDIA Cloud Gaming

 

Guest driver (Linux) Version: September 2025 Release
Virtual GPU Manager (Red Hat Enterprise Linux KVM, VMware vSphere) version: September 2025 Release

 

 

References

 

[1] Security Bulletin: NVIDIA CUDA Toolkit – September 2025
https://nvidia.custhelp.com/app/answers/detail/a_id/5661
[2] Security Bulletin: NVIDIA GPU Display Drivers – October 2025
https://nvidia.custhelp.com/app/answers/detail/a_id/5703