Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-23247

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this vulnerability might lead to arbitrary code execution.

Published

2025-05-27T17:15:25.813

Last Modified

2025-10-03T14:36:28.717

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.4 (MEDIUM)

Weaknesses

Type: Secondary
CWE-130

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	nvidia	cuda_toolkit	< 12.9.0	Yes
Operating System	linux	linux_kernel	-	No
Operating System	microsoft	windows	-	No

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5643 Vendor Advisory ([email protected])
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2151 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)