NVIDIA Patches High-Severity Vulnerabilities in NVDebug Tool

NVIDIA has released a software update for its NVDebug tool addressing three high-severity vulnerabilities, CVE-2025-23342, CVE-2025-23343, and CVE-2025-23344, that could allow attackers to execute code, escalate privileges, and tamper with data. The most severe issue, CVE-2025-23342, carries a CVSS base score of 8.2 (High). According to NVIDIA, “The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to a privileged account.

A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure and data tampering.” The other flaws include CVE-2025-23343, which may allow an actor to write files to restricted components, potentially causing information disclosure, denial of service and data tampering, and CVE-2025-23344, which may allow an actor to run code on the platform host as a non-privileged user, with similar potential impacts.

All versions of the NVDebug tool prior to 1.7.0 on x86_64 or arm64-SBSA architecture systems are affected, and NVIDIA has released NVDebug 1.7.0 and later as the patched version.