Home » Database

AVID-2026-R1661

Description

Vulnerability CVE-2025-23243

Details

NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue. A successful exploit of this vulnerability might lead to data tampering or denial of service.

Reason for inclusion in AVID: CVE-2025-23243 affects NVIDIA Riva, an AI inference/serving component. It describes an improper access control vulnerability that could lead to data tampering or denial of service. Riva is a software component used in AI pipelines and deployments, making this a software supply-chain vulnerability within general-purpose AI systems. The CVE entry, CWE reference, and CVSS details provide sufficient evidence.

References

Affected or Relevant Artifacts

  • Developer: NVIDIA
  • Deployer: NVIDIA
  • Artifact Details:
TypeName
SystemRiva

Impact

AVID Taxonomy Categorization

  • Risk domains: Security
  • SEP subcategories: S0100: Software Vulnerability
  • Lifecycle stages: L06: Deployment

CVSS

Version3.1
Vector StringCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Base Score6.5
Base Severity🟠 Medium
Attack VectorNETWORK
Attack Complexity🟢 Low
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity Impact🟢 Low
Availability Impact🟢 Low

CWE

IDDescription
CWE-284CWE-284 Improper Input Validation

Other information

  • Report Type: Advisory
  • Credits:
  • Date Reported: 2025-03-11
  • Version: 0.3.3
  • AVID Entry