CVE-2025-23330 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvidia	CNA	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA-ADP	ADP	---				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 1%

Debian Releases

Debian Product

Codename

nvidia-graphics-drivers

bullseye/non-free	vulnerable
trixie	no-dsa
bookworm	no-dsa
bookworm/non-free-firmware	vulnerable
bullseye	ignored
trixie/non-free-firmware	vulnerable
forky/non-free-firmware	vulnerable
sid/non-free-firmware	vulnerable

nvidia-graphics-drivers-legacy-340xx

sid/non-free	vulnerable
trixie	no-dsa
bookworm	no-dsa
bullseye	ignored

nvidia-graphics-drivers-legacy-390xx

bullseye/non-free	vulnerable
trixie	no-dsa
bookworm	no-dsa
sid/non-free	vulnerable
bullseye	ignored

nvidia-graphics-drivers-tesla

bookworm/non-free-firmware	525.147.05-15~deb12u1 fixed
trixie	no-dsa
bullseye	ignored
sid/non-free-firmware	525.147.05-16 fixed
bookworm	no-dsa

nvidia-graphics-drivers-tesla-418

bullseye/non-free	vulnerable
trixie	no-dsa
bookworm	no-dsa
sid/non-free	vulnerable
bullseye	ignored

nvidia-graphics-drivers-tesla-450

bullseye/non-free	450.248.02-7~deb11u1 fixed
trixie	no-dsa
bookworm	no-dsa
sid/non-free	450.248.02-11 fixed
bullseye	ignored

nvidia-graphics-drivers-tesla-460

bullseye/non-free	460.106.00-17~deb11u1 fixed
trixie	no-dsa
bookworm	no-dsa
sid/non-free	460.106.00-21 fixed
bullseye	ignored

nvidia-graphics-drivers-tesla-470

bullseye/non-free	vulnerable
trixie	no-dsa
bookworm	no-dsa
bookworm/non-free	vulnerable
bullseye	ignored
sid/non-free	vulnerable

nvidia-graphics-drivers-tesla-535

bookworm/non-free-firmware	vulnerable
trixie	no-dsa
bullseye	ignored
forky/non-free-firmware	vulnerable
trixie/non-free-firmware	vulnerable
bookworm	no-dsa
sid/non-free-firmware	535.274.02-1 fixed

nvidia-graphics-drivers-tesla-550

sid/non-free-firmware	vulnerable
trixie	no-dsa
bookworm	no-dsa
bullseye	ignored

nvidia-open-gpu-kernel-modules

bookworm/contrib	vulnerable
trixie	no-dsa
bullseye	ignored
trixie/contrib	vulnerable
bookworm	no-dsa
forky/contrib	vulnerable
sid/contrib	vulnerable

Common Weakness Enumeration

CWE-476 - NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23330

https://nvidia.custhelp.com/app/answers/detail/a_id/5703

https://www.cve.org/CVERecord?id=CVE-2025-23330