CVE-2025-23247

Description

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this vulnerability might lead to arbitrary code execution.

References

https://blog.talosintelligence.com/catdoc-zero-day-nvidia-high-logic-fontcreator-and-parallel-vulnerabilities/

https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2151

https://nvidia.custhelp.com/app/answers/detail/a_id/5643

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS