CVE-2025-23340

CWE-125 — Out-of-bounds Read5 documents5 sources

Severity

3.3LOW

EPSS

0.0%

top 92.78%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Nvidia Cuda Toolkit Nvidia Nvidia Cuda Toolkit

Timeline

PublishedSep 24

Description

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:LExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶NVDnvidia/cuda_toolkit< 13.0.0

▶CVEListV5nvidia/nvidia_cuda_toolkitAll versions prior to CUDA Toolkit 13.0

🔴Vulnerability Details

CVEList

CVE-2025-23340: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malfor↗2025-09-24

▶

OSV

CVE-2025-23340: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malfor↗2025-09-24

▶

GHSA

GHSA-97wr-qw29-jx82: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malfor↗2025-09-24

▶

📋Vendor Advisories

Debian

CVE-2025-23340: nvidia-cuda-toolkit - NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm b...↗2025

▶