CVE-2025-23243

CRITICAL 9.1CVE-2025-23243 · Published 11/03/2025 · updated 17/06/2026

In short

CVE-2025-23243 is a CRITICAL (CVSS 9.1) vulnerability affecting riva (nvidia).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.8% of all vulnerabilities.
Fix: update to 2.19.0 or later.

Package	Affected versions	Patched versions
riva nvidia	`< 2.19.0`	`2.19.0`

Description

NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue. A successful exploit of this vulnerability might lead to data tampering or denial of service.

References

nvidia.custhelp.com/app/answers/detail/a_id/5625 · Vendor Advisory

More vulnerabilities in riva

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free