CVE-2025-23308_CVE-2025-23308

3.3 / 10

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the user to run nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running nvdisasm.

Basic Information

ID CVE-2025-23308

Source nvidia

Published Sep 24, 2025 at 13:12

Modified Sep 24, 2025 at 14:09

Affected Product

Vendor NVIDIA

Product NVIDIA CUDA Toolkit

Version All versions prior to CUDA Toolkit 13.0

Affected Versions NVIDIA NVIDIA CUDA Toolkit All versions prior to CUDA Toolkit 13.0

CWE Classification

CWE-122

References

{
    "lastseen": "",
    "description": "NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the user to run nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running nvdisasm.",
    "published": "2025-09-24T13:12:37.723Z",
    "modified": "2025-09-24T14:09:35.456Z",
    "type": "cve",
    "title": "CVE-2025-23308",
    "source": "nvidia",
    "references": "https://nvd.nist.gov/vuln/detail/CVE-2025-23308\nhttps://www.cve.org/CVERecord?id=CVE-2025-23308\nhttps://nvidia.custhelp.com/app/answers/detail/a_id/5661",
    "id": "CVE-2025-23308",
    "bulletinFamily": "",
    "cwe": [
        "CWE-122"
    ],
    "cvelist": null,
    "sourceData": "NVIDIA NVIDIA CUDA Toolkit All versions prior to CUDA Toolkit 13.0",
    "sourceHref": "",
    "cvss": {
        "score": 3.3,
        "severity": "LOW",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "NVIDIA CUDA Toolkit",
    "version": "All versions prior to CUDA Toolkit 13.0",
    "vendor": "NVIDIA",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}