Misc ThreatCon Alpha: NVIDIA Fix for Potential Vulnerability 3 October 2025

[impeeza]

Attention: Delivery Partners, Account Security Leads, NVIDIA Administrators

NVIDIA has released its September Security Update which includes identification and remediation for a vulnerability affecting the NVIDIA Installer for NvAPP for Windows.

Tracked as CVE-2025-23297 the vulnerability in the FrameviewSDK installation process, could allow an attacker with local unprivileged access to modify files in the Frameview SDK directory. A successful exploit of this vulnerability might lead to escalation of privileges.

Affected Environments:

• Windows 10
• Windows 11

Platform affected:

Affected Product	Affected Platform or OS	Affected Versions	Fixed Versions
NVIDIA App	Windows 10/11	All versions prior to 11.0.5.245	11.0.5.245

Actions Required:

• Follow the guidance in the NOTES section of NVIDIA Security Advisory as soon as possible.
• Upgrade in accordance with contractually required Account Management procedures.

 

[Deleted member 702243]

they couldn't have made this less clear if they tried. so is the bug in the installer, or in the app itself?

 

[impeeza]

they couldn't have made this less clear if they tried. so is the bug in the installer, or in the app itself?

As far I know in the installer, but bit me with Nvidia you can not know.