CVE-2025-33230: OS Command Injection
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-33230?
CVE-2025-33230 has a CVSS score indicating a high severity due to its potential for OS command injection and privilege escalation.
How do I fix CVE-2025-33230?
To fix CVE-2025-33230, update to the latest version of NVIDIA Nsight Systems for Linux, which addresses this vulnerability.
What types of attacks can CVE-2025-33230 facilitate?
CVE-2025-33230 can facilitate OS command injection, potentially leading to privilege escalation or code execution.
Who is affected by CVE-2025-33230?
CVE-2025-33230 affects users of NVIDIA Nsight Systems for Linux who utilize the .run installer.
When was CVE-2025-33230 disclosed?
CVE-2025-33230 was disclosed in 2025 and has been recognized for its security implications in system installations.