← Back

CVE-2025-23338

nvd nist
Published: Sep 24, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write by running nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to denial of service.

Affected (1)

Products: Nvidia: Cuda Toolkit
Nvidia
1 product
Cuda Toolkit
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Cuda Toolkit
Before 13.0.0
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-129
Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References (4)

Source: psirt@nvidia.com
Third Party Advisory
Source: psirt@nvidia.com
Vendor Advisory
Source: psirt@nvidia.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.