CNNVD-202508-1407 Information

CNNVD ID

CNNVD-202508-1407

CVE-2025-23295

  • CNNVD Published: 2025-08-13

Description (Chinese)

NVIDIA Apex是美国英伟达(NVIDIA)公司的一套实用工具包。 NVIDIA Apex存在代码注入漏洞,该漏洞源于Python组件可能导致代码注入,可能导致代码执行、权限提升、信息泄露和数据篡改。

Description (English)

NVIDIA Apex is a practical toolkit for NVIDIA in the United States. NVIDIA Apex has a code infusion loophole, which stems from the Python component, which may result in code injections, code execution, authority enhancement, information leak and data manipulation.

Hazard Level

Medium

Vulnerability Type

代码注入

Affected Vendor

英伟达

Published

2025-08-13

Last Modified

2026-02-24

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23295 https://nvidia.custhelp.com/app/answers/detail/a_id/5680 https://www.cve.org/CVERecord?id=CVE-2025-23295

Patch

https://nvidia.custhelp.com/app/answers/detail/a_id/5680

Share on: