cbcvebase.
CVE-2025-23340
published 2025-09-24

CVE-2025-23340: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF…

PriorityP47low3.3CVSS 3.1
AVLACLPRNUIRSUCNINAL
EPSS
0.17%
6.2th percentile
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service.

Affected

3 ranges
VendorProductVersion rangeFixed in
debiannvidia-cuda-toolkit
nvidiacuda_toolkit< 13.0.013.0.0
nvidianvidia_cuda_toolkit

CVSS provenance

nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
osv3.3LOW
vendor_debian3.3LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.