CNNVD-202512-2795 Information

CNNVD ID

CNNVD-202512-2795

CVE-2025-33225

  • CNNVD Published: 2025-12-16

Description (Chinese)

NVIDIA Resiliency Extension是美国英伟达(NVIDIA)公司的一个Python包。 NVIDIA Resiliency Extension存在安全漏洞,该漏洞源于日志聚合中可预测日志文件名,可能导致权限提升、代码执行、拒绝服务、信息泄露和数据篡改。

Description (English)

NVIDIA Resiliency Extension is a Python package of NVIDIA Corporation in the United States. There is a security loophole in NVIDIA Resiliency Extension, which originates from a predictable log filename in the journal aggregation, which may lead to rights enhancement, code execution, denial of services, information leaks and data manipulation.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

英伟达

Published

2025-12-16

Last Modified

2026-02-24

References

https://nvd.nist.gov/vuln/detail/CVE-2025-33225 https://nvidia.custhelp.com/app/answers/detail/a_id/5746 https://www.cve.org/CVERecord?id=CVE-2025-33225

Patch

https://nvidia.custhelp.com/app/answers/detail/a_id/5746

Share on: