CVE-2025-33220 (GCVE-0-2025-33220)

Vulnerability from cvelistv5 – Published: 2026-01-28 17:48 – Updated: 2026-02-26 15:04
VLAI
Summary
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-01-29 04:55 UTC
CWE
Assigner
References
Impacted products
Vendor Product Version CPE status
NVIDIA GeForce Affected: All driver versions prior to 590.48.01
guessed Create a notification for this product.
NVIDIA GeForce Affected: All driver versions prior to 580.126.09
guessed Create a notification for this product.
NVIDIA GeForce Affected: All driver versions prior to 570.211.01
guessed Create a notification for this product.
NVIDIA GeForce Affected: All driver versions prior to 535.288.01
guessed Create a notification for this product.
NVIDIA RTX PRO, RTX, Quadro Affected: All driver versions prior to 590.48.01
guessed Create a notification for this product.
NVIDIA RTX PRO, RTX, Quadro Affected: All driver versions prior to 580.126.09
guessed Create a notification for this product.
NVIDIA RTX PRO, RTX, Quadro Affected: All driver versions prior to 570.211.01
guessed Create a notification for this product.
NVIDIA RTX PRO, RTX, Quadro Affected: All driver versions prior to 535.288.01
guessed Create a notification for this product.
NVIDIA Tesla Affected: All driver versions prior to 590.48.01
guessed Create a notification for this product.
NVIDIA Tesla Affected: All driver versions prior to 580.126.09
guessed Create a notification for this product.
NVIDIA Tesla Affected: All driver versions prior to 570.211.01
guessed Create a notification for this product.
NVIDIA Tesla Affected: All driver versions prior to 535.288.01
guessed Create a notification for this product.
NVIDIA Virtual GPU Manager Affected: 580.105.06(All versions prior to and including vGPU software 19.3)
guessed Create a notification for this product.
NVIDIA Virtual GPU Manager Affected: 570.195.02(All versions prior to and including vGPU software 18.5)
guessed Create a notification for this product.
NVIDIA Virtual GPU Manager Affected: 535.274.03(All versions prior to and including vGPU software 16.13)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-33220",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-29T04:55:54.370394Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T15:04:45.953Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R590)"
          ],
          "product": "GeForce",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All driver versions prior to 590.48.01"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R580)"
          ],
          "product": "GeForce",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All driver versions prior to 580.126.09"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R570)"
          ],
          "product": "GeForce",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All driver versions prior to 570.211.01"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R535)"
          ],
          "product": "GeForce",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All driver versions prior to 535.288.01"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R590)"
          ],
          "product": "RTX PRO, RTX, Quadro",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All driver versions prior to 590.48.01"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R580)"
          ],
          "product": "RTX PRO, RTX, Quadro",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All driver versions prior to 580.126.09"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R570)"
          ],
          "product": "RTX PRO, RTX, Quadro",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All driver versions prior to 570.211.01"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R535)"
          ],
          "product": "RTX PRO, RTX, Quadro",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All driver versions prior to 535.288.01"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R590)"
          ],
          "product": "Tesla",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All driver versions prior to 590.48.01"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R580)"
          ],
          "product": "Tesla",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All driver versions prior to 580.126.09"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R570)"
          ],
          "product": "Tesla",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All driver versions prior to 570.211.01"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux(R535)"
          ],
          "product": "Tesla",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All driver versions prior to 535.288.01"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "XenServer",
            "VMware vSphere",
            "Red Hat Enterprise Linux KVM",
            "Ubuntu(vGPU 19)"
          ],
          "product": "Virtual GPU Manager",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "580.105.06(All versions prior to and including vGPU software 19.3)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "XenServer",
            "VMware vSphere",
            "Red Hat Enterprise Linux KVM",
            "Ubuntu(vGPU 18)"
          ],
          "product": "Virtual GPU Manager",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "570.195.02(All versions prior to and including vGPU software 18.5)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "XenServer",
            "VMware vSphere",
            "Red Hat Enterprise Linux KVM",
            "Ubuntu(vGPU 16)"
          ],
          "product": "Virtual GPU Manager",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "535.274.03(All versions prior to and including vGPU software 16.13)"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": true,
              "type": "text/html",
              "value": "NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure."
            }
          ],
          "value": "NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Code execution, escalation of privileges, data tampering, denial of service, information disclosure"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-28T17:48:40.752Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33220"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-33220"
        },
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5747"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "NVIDIA PSIRT"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2025-33220",
    "datePublished": "2026-01-28T17:48:40.752Z",
    "dateReserved": "2025-04-15T18:51:06.915Z",
    "dateUpdated": "2026-02-26T15:04:45.953Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-33220",
      "date": "2026-10-02",
      "epss": "0.00207",
      "percentile": "0.09783"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R590)"
                ],
                "product": "GeForce",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All driver versions prior to 590.48.01"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R580)"
                ],
                "product": "GeForce",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All driver versions prior to 580.126.09"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R570)"
                ],
                "product": "GeForce",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All driver versions prior to 570.211.01"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R535)"
                ],
                "product": "GeForce",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All driver versions prior to 535.288.01"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R590)"
                ],
                "product": "RTX PRO, RTX, Quadro",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All driver versions prior to 590.48.01"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R580)"
                ],
                "product": "RTX PRO, RTX, Quadro",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All driver versions prior to 580.126.09"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R570)"
                ],
                "product": "RTX PRO, RTX, Quadro",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All driver versions prior to 570.211.01"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R535)"
                ],
                "product": "RTX PRO, RTX, Quadro",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All driver versions prior to 535.288.01"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R590)"
                ],
                "product": "Tesla",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All driver versions prior to 590.48.01"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R580)"
                ],
                "product": "Tesla",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All driver versions prior to 580.126.09"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R570)"
                ],
                "product": "Tesla",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All driver versions prior to 570.211.01"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Linux(R535)"
                ],
                "product": "Tesla",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All driver versions prior to 535.288.01"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "XenServer",
                  "VMware vSphere",
                  "Red Hat Enterprise Linux KVM",
                  "Ubuntu(vGPU 19)"
                ],
                "product": "Virtual GPU Manager",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "580.105.06(All versions prior to and including vGPU software 19.3)"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "XenServer",
                  "VMware vSphere",
                  "Red Hat Enterprise Linux KVM",
                  "Ubuntu(vGPU 18)"
                ],
                "product": "Virtual GPU Manager",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "570.195.02(All versions prior to and including vGPU software 18.5)"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "XenServer",
                  "VMware vSphere",
                  "Red Hat Enterprise Linux KVM",
                  "Ubuntu(vGPU 16)"
                ],
                "product": "Virtual GPU Manager",
                "vendor": "NVIDIA",
                "versions": [
                  {
                    "status": "affected",
                    "version": "535.274.03(All versions prior to and including vGPU software 16.13)"
                  }
                ]
              }
            ],
            "source": "psirt@nvidia.com"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure."
          },
          {
            "lang": "es",
            "value": "El software NVIDIA vGPU contiene una vulnerabilidad en el Virtual GPU Manager, en el que un invitado malicioso podr\u00eda lograr acceder a la memoria del mont\u00edculo despu\u00e9s de que la memoria ha sido liberada. Si la vulnerabilidad se explota con \u00e9xito se podr\u00eda ejecutar c\u00f3digo, escalar privilegios, manipular datos, realizar denegaciones de servicio o revelar informaci\u00f3n."
          }
        ],
        "id": "CVE-2025-33220",
        "lastModified": "2026-06-17T09:13:15.623",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "psirt@nvidia.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2025-33220",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-29T04:55:54.370394Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-01-28T18:16:48.857",
        "references": [
          {
            "source": "psirt@nvidia.com",
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33220"
          },
          {
            "source": "psirt@nvidia.com",
            "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5747"
          },
          {
            "source": "psirt@nvidia.com",
            "url": "https://www.cve.org/CVERecord?id=CVE-2025-33220"
          }
        ],
        "sourceIdentifier": "psirt@nvidia.com",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-416"
              }
            ],
            "source": "psirt@nvidia.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-03-27T08:44:32+00:00",
      "cve": "CVE-2025-33220",
      "id": "CVE-2025-33220",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2025-33220",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-33220.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-33220",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-01-29T04:55:54.370394Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-01-28T18:03:58.669Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R590)"
              ],
              "product": "GeForce",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "All driver versions prior to 590.48.01"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R580)"
              ],
              "product": "GeForce",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "All driver versions prior to 580.126.09"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R570)"
              ],
              "product": "GeForce",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "All driver versions prior to 570.211.01"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R535)"
              ],
              "product": "GeForce",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "All driver versions prior to 535.288.01"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R590)"
              ],
              "product": "RTX PRO, RTX, Quadro",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "All driver versions prior to 590.48.01"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R580)"
              ],
              "product": "RTX PRO, RTX, Quadro",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "All driver versions prior to 580.126.09"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R570)"
              ],
              "product": "RTX PRO, RTX, Quadro",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "All driver versions prior to 570.211.01"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R535)"
              ],
              "product": "RTX PRO, RTX, Quadro",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "All driver versions prior to 535.288.01"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R590)"
              ],
              "product": "Tesla",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "All driver versions prior to 590.48.01"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R580)"
              ],
              "product": "Tesla",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "All driver versions prior to 580.126.09"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R570)"
              ],
              "product": "Tesla",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "All driver versions prior to 570.211.01"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Linux(R535)"
              ],
              "product": "Tesla",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "All driver versions prior to 535.288.01"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "XenServer",
                "VMware vSphere",
                "Red Hat Enterprise Linux KVM",
                "Ubuntu(vGPU 19)"
              ],
              "product": "Virtual GPU Manager",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "580.105.06(All versions prior to and including vGPU software 19.3)"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "XenServer",
                "VMware vSphere",
                "Red Hat Enterprise Linux KVM",
                "Ubuntu(vGPU 18)"
              ],
              "product": "Virtual GPU Manager",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "570.195.02(All versions prior to and including vGPU software 18.5)"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "XenServer",
                "VMware vSphere",
                "Red Hat Enterprise Linux KVM",
                "Ubuntu(vGPU 16)"
              ],
              "product": "Virtual GPU Manager",
              "vendor": "NVIDIA",
              "versions": [
                {
                  "status": "affected",
                  "version": "535.274.03(All versions prior to and including vGPU software 16.13)"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": true,
                  "type": "text/html",
                  "value": "NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure."
                }
              ],
              "value": "NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure."
            }
          ],
          "impacts": [
            {
              "descriptions": [
                {
                  "lang": "en",
                  "value": "Code execution, escalation of privileges, data tampering, denial of service, information disclosure"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-416",
                  "description": "CWE-416 Use After Free",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-01-28T17:48:40.752Z",
            "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
            "shortName": "nvidia"
          },
          "references": [
            {
              "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33220"
            },
            {
              "url": "https://www.cve.org/CVERecord?id=CVE-2025-33220"
            },
            {
              "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5747"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "NVIDIA PSIRT"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "assignerShortName": "nvidia",
        "cveId": "CVE-2025-33220",
        "datePublished": "2026-01-28T17:48:40.752Z",
        "dateReserved": "2025-04-15T18:51:06.915Z",
        "dateUpdated": "2026-02-26T15:04:45.953Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.