CVE-2025-23243 Missing authorization in Riva
An attacker can exploit improper access control in NVIDIA Riva to tamper with data or cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-23243?
CVE-2025-23243 is a medium-severity missing authorization vulnerability in NVIDIA Riva, published on 11 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue. A successful exploit of this vulnerability might lead to data tampering or denial of service.
Weakness: CWE-284
Which versions are affected by CVE-2025-23243?
It affects 1 product.
Products include Nvidia Riva.
How do I fix CVE-2025-23243?
No fix has been published for CVE-2025-23243 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2025-23243 being exploited?
There is no known exploitation of CVE-2025-23243 in the wild and no public exploit code.
Other vulnerabilities in NVIDIA Riva
Sources
Also known as GHSA-wh9x-w9vv-rjf9.