CVE-2025-33230

NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.3 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
nvidiaCNA
7.3 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Debian logo
Debian Releases
Debian Product
Codename
nvidia-cuda-toolkit
bullseye/non-free
vulnerable
bookworm/non-free
vulnerable
trixie/non-free
vulnerable
forky/non-free
vulnerable
sid/non-free
vulnerable
Common Weakness Enumeration
References
https://nvd.nist.gov/vuln/detail/CVE-2025-33230
https://nvidia.custhelp.com/app/answers/detail/a_id/5755
https://www.cve.org/CVERecord?id=CVE-2025-33230