CVE-2025-33218

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-33218", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "state": "PUBLISHED", "assignerShortName": "nvidia", "dateReserved": "2025-04-15T18:51:06.915Z", "datePublished": "2026-01-28T17:47:25.322Z", "dateUpdated": "2026-02-26T15:04:46.571Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Windows(R590)"], "product": "GeForce", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R590)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R580)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 582.16"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R570)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 573.96"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R535)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 539.64"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R590)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R580)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 582.16"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R570)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 573.91"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R535)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 539.64"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R580 vGPU 19)"], "product": "Guest driver", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "581.80(All versions prior to and including vGPU software 19.3)"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R570 vGPU 18)"], "product": "Guest driver", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "573.76(All versions prior to and including vGPU software 18.5)"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R535 vGPU 16)"], "product": "Guest driver", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "539.56(All versions prior to and including vGPU software 16.12)"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": true, "type": "text/html", "value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure."}], "value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure."}], "impacts": [{"descriptions": [{"lang": "en", "value": "Code execution, escalation of privileges, data tampering, denial of service, information disclosure"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-190", "description": "CWE-190 Integer Overflow or Wraparound", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2026-01-28T17:47:25.322Z"}, "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33218"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2025-33218"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5747"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "NVIDIA PSIRT"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-33218", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-29T04:55:52.128183Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T15:04:46.571Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-33218", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-29T04:55:52.128183Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-28T18:13:40.230Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "impacts": [{"descriptions": [{"lang": "en", "value": "Code execution, escalation of privileges, data tampering, denial of service, information disclosure"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NVIDIA", "product": "GeForce", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}], "platforms": ["Windows(R590)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "RTX PRO, RTX, Quadro", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}], "platforms": ["Windows(R590)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "RTX PRO, RTX, Quadro", "versions": [{"status": "affected", "version": "All driver versions prior to 582.16"}], "platforms": ["Windows(R580)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "RTX PRO, RTX, Quadro", "versions": [{"status": "affected", "version": "All driver versions prior to 573.96"}], "platforms": ["Windows(R570)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "RTX PRO, RTX, Quadro", "versions": [{"status": "affected", "version": "All driver versions prior to 539.64"}], "platforms": ["Windows(R535)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Tesla", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}], "platforms": ["Windows(R590)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Tesla", "versions": [{"status": "affected", "version": "All driver versions prior to 582.16"}], "platforms": ["Windows(R580)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Tesla", "versions": [{"status": "affected", "version": "All driver versions prior to 573.91"}], "platforms": ["Windows(R570)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Tesla", "versions": [{"status": "affected", "version": "All driver versions prior to 539.64"}], "platforms": ["Windows(R535)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Guest driver", "versions": [{"status": "affected", "version": "581.80(All versions prior to and including vGPU software 19.3)"}], "platforms": ["Windows(R580 vGPU 19)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Guest driver", "versions": [{"status": "affected", "version": "573.76(All versions prior to and including vGPU software 18.5)"}], "platforms": ["Windows(R570 vGPU 18)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Guest driver", "versions": [{"status": "affected", "version": "539.56(All versions prior to and including vGPU software 16.12)"}], "platforms": ["Windows(R535 vGPU 16)"], "defaultStatus": "unaffected"}], "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33218"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2025-33218"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5747"}], "x_generator": {"engine": "NVIDIA PSIRT"}, "descriptions": [{"lang": "en", "value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.", "supportingMedia": [{"type": "text/html", "value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.", "base64": true}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-190", "description": "CWE-190 Integer Overflow or Wraparound"}]}], "providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2026-01-28T17:47:25.322Z"}}}, "cveMetadata": {"cveId": "CVE-2025-33218", "state": "PUBLISHED", "dateUpdated": "2026-02-26T15:04:46.571Z", "dateReserved": "2025-04-15T18:51:06.915Z", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "datePublished": "2026-01-28T17:47:25.322Z", "assignerShortName": "nvidia"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Windows(R590)"], "product": "GeForce", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R590)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R580)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 582.16"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R570)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 573.96"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R535)"], "product": "RTX PRO, RTX, Quadro", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 539.64"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R590)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 591.59"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R580)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 582.16"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R570)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 573.91"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R535)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 539.64"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R580 vGPU 19)"], "product": "Guest driver", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "581.80(All versions prior to and including vGPU software 19.3)"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R570 vGPU 18)"], "product": "Guest driver", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "573.76(All versions prior to and including vGPU software 18.5)"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R535 vGPU 16)"], "product": "Guest driver", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "539.56(All versions prior to and including vGPU software 16.12)"}]}], "source": "psirt@nvidia.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure."}, {"lang": "es", "value": "El controlador de pantalla de GPU NVIDIA para Windows contiene una vulnerabilidad en la capa de modo kernel (nvlddmkm.sys), en el que un atacante podr\u00eda causar un desbordamiento de entero. Si se explota con \u00e9xito esta vulnerabilidad se podr\u00eda lograr la ejecuci\u00f3n de c\u00f3digo, escalada de privilegios, manipulaci\u00f3n de datos, denegaci\u00f3n de servicio o revelaci\u00f3n de informaci\u00f3n."}], "id": "CVE-2025-33218", "lastModified": "2026-06-17T09:13:15.383", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "psirt@nvidia.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-33218", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-29T04:55:52.128183Z", "version": "2.0.3"}}]}, "published": "2026-01-28T18:16:48.540", "references": [{"source": "psirt@nvidia.com", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33218"}, {"source": "psirt@nvidia.com", "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5747"}, {"source": "psirt@nvidia.com", "url": "https://www.cve.org/CVERecord?id=CVE-2025-33218"}], "sourceIdentifier": "psirt@nvidia.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-190"}], "source": "psirt@nvidia.com", "type": "Secondary"}]}

{}

{"created": "2026-01-29T09:08:55.182332+00:00", "updated": "2026-01-29T09:08:55.182358+00:00", "vendors": ["nvidia", "nvidia$PRODUCT$geforce", "nvidia$PRODUCT$gpu_display_driver", "nvidia$PRODUCT$quadro", "nvidia$PRODUCT$rtx", "nvidia$PRODUCT$rtx_pro", "nvidia$PRODUCT$tesla"]}