CVE-2025-33220

State: Published
Severity: 7.8 High
Published: Jan 28, 2026
Updated: Feb 26, 2026
Reserved: Apr 15, 2025

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	nvidia

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
GeForceNVIDIA	All driver versions prior to 590.48.01Affected
GeForceNVIDIA	All driver versions prior to 580.126.09Affected
GeForceNVIDIA	All driver versions prior to 570.211.01Affected
GeForceNVIDIA	All driver versions prior to 535.288.01Affected
RTX PRO, RTX, QuadroNVIDIA	All driver versions prior to 590.48.01Affected
RTX PRO, RTX, QuadroNVIDIA	All driver versions prior to 580.126.09Affected
RTX PRO, RTX, QuadroNVIDIA	All driver versions prior to 570.211.01Affected
RTX PRO, RTX, QuadroNVIDIA	All driver versions prior to 535.288.01Affected
TeslaNVIDIA	All driver versions prior to 590.48.01Affected
TeslaNVIDIA	All driver versions prior to 580.126.09Affected
TeslaNVIDIA	All driver versions prior to 570.211.01Affected
TeslaNVIDIA	All driver versions prior to 535.288.01Affected
Virtual GPU ManagerNVIDIA	580.105.06(All versions prior to and including vGPU software 19.3)Affected
Virtual GPU ManagerNVIDIA	570.195.02(All versions prior to and including vGPU software 18.5)Affected
Virtual GPU ManagerNVIDIA	535.274.03(All versions prior to and including vGPU software 16.13)Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.