THREAT INTELLIGENCE
Multiple NVIDIA CUDA and Merlin Vulnerabilities Identified

Peer Review

Gartner brand name text logo in white with registered trademark symbol.
5-star rating
4.8

Proven Trust

Dark blue circle with two overlapping checkmarks, one green and one light blue.
ISO 27001 text with a globe outline symbol on a black background.
2025 winner badge for Cyber Security Excellence Awards with gold and black design.

High

CVE-2025-33228, CVE-2025-33229, CVE-2025-33230, CVE-2025-33231, CVE-2025-33233

Other

January 21, 2026

Executive Summary

Multiple vulnerabilities in NVIDIA CUDA Toolkit and Merlin could allow code execution, privilege escalation, data tampering, or DoS across Windows and Linux systems.

Key Details

Affected Platform

Attack Surface

Recommended Action

Affected Environment

Operational Impact

Severity ranges from Medium to High. Successful exploitation may result in code execution, privilege escalation, denial of service, information disclosure, or data tampering. Development environments and shared compute systems running CUDA Toolkit or Merlin workloads are particularly at risk where elevated permissions are present.

Technical Root Cause

Recommended Mitigation

  • Upgrade to the latest supported versions from NVIDIA. Apply least privilege to development and production systems. Restrict write permissions to application directories to mitigate DLL hijacking. Use vulnerability management and application control tooling to detect unauthorised execution attempts.

Concerned about your exposure?

Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.

Discuss Your Security ExposureExplore Managed Detection and Response

Assess your risk

Identify affected systems

Plan remediation

Practical, vendor-aligned guidance

Get expert support

From our 24/7 security team

Stay ahead of emerging threats

Get the latest threat intelligence and security advisories from Smarttech247.

View All Threat Updates

Full Technical Report

Download the complete analysis, including detailed technical findings and references.

Download Full Report (PDF)

Recent Threat Intelligence