High severity7.1NVD Advisory· Published Jul 4, 2023· Updated Jun 17, 2026

CVE-2023-25517

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest OS may be able to control resources for which it is not authorized, which may lead to information disclosure and data tampering.

Affected products

Nvidia/Display Driver
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:*:*:*
Range: <11.13
Nvidia/Virtual GPU Managerllm-fuzzy
Nvidia/vGPU softwarecpe-rescue
Range: All versions prior to and including 15.2, 13.7, and 11.12, and all versions prior to and including the May 2023 release

Patches

Vulnerability mechanics

References

nvidia.custhelp.com/app/answers/detail/a_id/5468nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000