CVE-2025-23253

Published: Apr 22, 2025Modified: Jun 17, 2026Deferred

2.5

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Exploitability: 1.0 / Impact: 1.4

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying a malicious DLL in a hard-coded path. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

Related CWEs

CWE-547

Use of Hard-coded, Security-relevant Constants

The product uses hard-coded constants instead of symbolic names for security-critical values, which increases the likelihood of mistakes during code maintenance or security policy change.

References (1)

https://nvidia.custhelp.com/app/answers/detail/a_id/5644

Source: psirt@nvidia.com

Timeline

No history available yet.