CVE-2025-33217

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-33217", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "state": "PUBLISHED", "assignerShortName": "nvidia", "dateReserved": "2025-04-15T18:51:06.915Z", "datePublished": "2026-01-28T17:46:41.741Z", "dateUpdated": "2026-02-26T15:04:46.857Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Windows(R590)"], "product": "GeForce", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R590)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R580)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 582.16"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R570)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 573.96"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R535)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 539.64"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R590)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R580)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 582.16"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R570)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 573.96"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R535)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 539.64"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": true, "type": "text/html", "value": "NVIDIA Display Driver for Windows contains a vulnerability where an attacker could trigger a use after free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."}], "value": "NVIDIA Display Driver for Windows contains a vulnerability where an attacker could trigger a use after free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."}], "impacts": [{"descriptions": [{"lang": "en", "value": "Code execution, escalation of privileges, data tampering, denial of service, information disclosure"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-416", "description": "CWE-416 Use After Free", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2026-01-28T17:46:41.741Z"}, "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33217"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2025-33217"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5747"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "NVIDIA PSIRT"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-33217", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-29T04:55:51.034053Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T15:04:46.857Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-33217", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-29T04:55:51.034053Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-28T18:14:37.617Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "impacts": [{"descriptions": [{"lang": "en", "value": "Code execution, escalation of privileges, data tampering, denial of service, information disclosure"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NVIDIA", "product": "GeForce", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}], "platforms": ["Windows(R590)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "RTX PRO, RTX, Quadro", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}], "platforms": ["Windows(R590)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "RTX PRO, RTX, Quadro", "versions": [{"status": "affected", "version": "All driver versions prior to 582.16"}], "platforms": ["Windows(R580)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "RTX PRO, RTX, Quadro", "versions": [{"status": "affected", "version": "All driver versions prior to 573.96"}], "platforms": ["Windows(R570)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "RTX PRO, RTX, Quadro", "versions": [{"status": "affected", "version": "All driver versions prior to 539.64"}], "platforms": ["Windows(R535)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Tesla", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}], "platforms": ["Windows(R590)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Tesla", "versions": [{"status": "affected", "version": "All driver versions prior to 582.16"}], "platforms": ["Windows(R580)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Tesla", "versions": [{"status": "affected", "version": "All driver versions prior to 573.96"}], "platforms": ["Windows(R570)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Tesla", "versions": [{"status": "affected", "version": "All driver versions prior to 539.64"}], "platforms": ["Windows(R535)"], "defaultStatus": "unaffected"}], "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33217"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2025-33217"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5747"}], "x_generator": {"engine": "NVIDIA PSIRT"}, "descriptions": [{"lang": "en", "value": "NVIDIA Display Driver for Windows contains a vulnerability where an attacker could trigger a use after free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.", "supportingMedia": [{"type": "text/html", "value": "NVIDIA Display Driver for Windows contains a vulnerability where an attacker could trigger a use after free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.", "base64": true}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use After Free"}]}], "providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2026-01-28T17:46:41.741Z"}}}, "cveMetadata": {"cveId": "CVE-2025-33217", "state": "PUBLISHED", "dateUpdated": "2026-02-26T15:04:46.857Z", "dateReserved": "2025-04-15T18:51:06.915Z", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "datePublished": "2026-01-28T17:46:41.741Z", "assignerShortName": "nvidia"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Windows(R590)"], "product": "GeForce", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R590)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R580)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 582.16"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R570)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 573.96"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R535)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 539.64"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R590)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R580)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 582.16"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R570)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 573.96"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R535)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 539.64"}]}], "source": "psirt@nvidia.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "NVIDIA Display Driver for Windows contains a vulnerability where an attacker could trigger a use after free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."}, {"lang": "es", "value": "El controlador de pantalla NVIDIA para Windows contiene una vulnerabilidad por la que un atacante podr\u00eda desencadenar un 'use after free'. Si se explota con \u00e9xito se podr\u00eda lograr la ejecuci\u00f3n de c\u00f3digo, la escalada de privilegios, la manipulaci\u00f3n de datos, la denegaci\u00f3n de servicio y la revelaci\u00f3n de informaci\u00f3n."}], "id": "CVE-2025-33217", "lastModified": "2026-06-17T09:13:15.283", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "psirt@nvidia.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-33217", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-29T04:55:51.034053Z", "version": "2.0.3"}}]}, "published": "2026-01-28T18:16:48.377", "references": [{"source": "psirt@nvidia.com", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33217"}, {"source": "psirt@nvidia.com", "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5747"}, {"source": "psirt@nvidia.com", "url": "https://www.cve.org/CVERecord?id=CVE-2025-33217"}], "sourceIdentifier": "psirt@nvidia.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "psirt@nvidia.com", "type": "Secondary"}]}

{}

{"created": "2026-01-29T09:08:41.688774+00:00", "updated": "2026-01-29T09:08:41.688811+00:00", "vendors": ["nvidia", "nvidia$PRODUCT$display_driver", "nvidia$PRODUCT$geforce", "nvidia$PRODUCT$quadro", "nvidia$PRODUCT$rtx", "nvidia$PRODUCT$rtx_pro", "nvidia$PRODUCT$tesla"]}