CVE-2025-23344: OS Command Injection
The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to run code on the platform host as a non-privileged user. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure and data tampering.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23344?
CVE-2025-23344 is considered a high-severity vulnerability due to its potential to allow unauthorized code execution.
How do I fix CVE-2025-23344?
To fix CVE-2025-23344, users should update to the latest version of the NVIDIA NVDebug tool as recommended by the vendor.
What types of systems are affected by CVE-2025-23344?
CVE-2025-23344 affects systems running the NVIDIA NVDebug tool.
What are the potential impacts of exploiting CVE-2025-23344?
Exploiting CVE-2025-23344 may lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.
Can CVE-2025-23344 be exploited remotely?
Yes, CVE-2025-23344 could potentially be exploited by an actor without the need for privileged access, making it a significant risk.