CVE-2025-23352
High · 7.8CVSS
7.8
EPSS
0.2%
Published
Oct 23, 2025
CISA due date
—
The record
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort… CWE-824
- CVE-2026-109619 PHP has various global state that temporarily points into request memory. CWE-824
- CVE-2026-88054 Tesseract is an open source OCR engine. CWE-824
- CVE-2026-54920 OpenEXR is the reference implementation and specification for the EXR image format… CWE-824
- CVE-2026-47908 Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized… CWE-824
- CVE-2026-47320 Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open… CWE-824
- CVE-2026-42959 NLnet Labs Unbound up to and including version 1.25.0 has a denial of service… CWE-824
- CVE-2026-45736 ws is an open source WebSocket client and server for Node.js. CWE-824