CVE-2025-23267

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service.

Score

CVSS 3.1 8.5 High

Status

Deferred - psirt@nvidia.com

Published

2025-07-17

Last modified

2025-11-04

Weaknesses

CWE-59

Affected products

• Container Toolkit (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5659
• http://www.openwall.com/lists/oss-security/2025/07/16/3