CVE-2025-33228 - CVE House
Back to Database
Status published High CVE-2025-33228

NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe,...

Vulnerability Description

NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the process_nsys_rep_cli.py script if the script is invoked manually. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-33228

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

CUDA Toolkit
Vulnerable Versions:
All versions prior to CUDA Toolkit 13.1

Timeline

Official Publish: January 20th, 2026
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)