ZDI-CAN-27248 HIGH 7.5 Overdue Jun 03, 2025

NVIDIA

NVIDIA, a major graphics processor and AI computing company, has a high-severity vulnerability (CVSS 7.5) that can be exploited remotely over the network without requiring authentication or user interaction, resulting in high confidentiality impact but no integrity or availability compromise. The vulnerability affects NVIDIA's core products and could allow attackers to access sensitive information from affected systems. Security teams should monitor NVIDIA's October 1st deadline for patches and immediately apply updates once released, particularly for systems handling sensitive data or operating in critical environments.

Advisory Details
Researcher Discovered by: Ho Xuan Ninh (@izx) + Tri Dang (Sea Security)
Reported June 03, 2025
Deadline October 01, 2025 197d overdue
CVSS Vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy