CVE-2023-25512

CWE-125 — Out-of-bounds Read5 documents5 sources
Severity
6.6MEDIUM
EPSS
0.1%
top 76.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia Cuda ToolkitNvidia Nvidia Cuda Toolkit
Timeline
PublishedApr 22

Description

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:LExploitability: 1.8 | Impact: 3.4

Affected Packages3 packages

▶NVDnvidia/cuda_toolkit< 12.1.0
▶Debiannvidia-cuda-toolkit< 12.1.0-2+1
▶CVEListV5nvidia/nvidia_cuda_toolkitAll versions prior to 12.1

🔴Vulnerability Details

3
CVEList
CVE-2023-25512: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running c↗2023-04-22
▶
GHSA
GHSA-r88v-8382-33p7: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running c↗2023-04-22
▶
OSV
CVE-2023-25512: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running c↗2023-04-22
▶

📋Vendor Advisories

1
Debian
CVE-2023-25512: nvidia-cuda-toolkit - NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump,...↗2023
▶
CVE-2023-25512 (MEDIUM CVSS 6.6) | NVIDIA CUDA toolkit for Linux and W | cvebase.io