CVE-2023-25514

CWE-125 — Out-of-bounds Read5 documents5 sources
Severity
6.6MEDIUM
EPSS
0.1%
top 75.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia Cuda ToolkitNvidia Nvidia Cuda Toolkit
Timeline
PublishedApr 22

Description

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:LExploitability: 1.8 | Impact: 3.4

Affected Packages3 packages

▶NVDnvidia/cuda_toolkit< 12.1.1
▶Debiannvidia-cuda-toolkit< 12.1.1-1+1
▶CVEListV5nvidia/nvidia_cuda_toolkitAll versions prior to 12.1 Update 1

🔴Vulnerability Details

3
GHSA
GHSA-pqj7-xq5w-mc28: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user↗2023-04-22
▶
OSV
CVE-2023-25514: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user↗2023-04-22
▶
CVEList
CVE-2023-25514: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user↗2023-04-22
▶

📋Vendor Advisories

1
Debian
CVE-2023-25514: nvidia-cuda-toolkit - NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump,...↗2023
▶
CVE-2023-25514 (MEDIUM CVSS 6.6) | NVIDIA CUDA toolkit for Linux and W | cvebase.io