High severity7.3NVD Advisory· Published Jan 20, 2026· Updated Jun 17, 2026
CVE-2025-33228
CVE-2025-33228
Description
NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the process_nsys_rep_cli.py script if the script is invoked manually. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*range: <13.1.0
- (no CPE)range: All versions prior to CUDA Toolkit 13.1
Patches
Vulnerability mechanics
References
3- nvidia.custhelp.com/app/answers/detail/a_id/5755nvdPatchVendor Advisory
- www.cve.org/CVERecordnvdThird Party Advisory
- nvd.nist.gov/vuln/detail/CVE-2025-33228nvdUS Government ResourceVDB Entry
News mentions
0No linked articles in our index yet.