CVE-2025-23247
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this vulnerability might lead to arbitrary code execution.
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - psirt@nvidia.com
- Published
- 2025-05-27
- Last modified
- 2025-06-02
- Weaknesses
- CWE-130
Affected products
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5643
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2151
