CVE-2025-23255

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary where a user may cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability may lead to a partial denial of service.

CVSS v3 3.3 LOW

3.3^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://nvd.nist.gov/vuln/detail/CVE-2025-23255	Third Party Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5661	Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2025-23255	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*

History

17 Jun 2026, 08:52

Type	Values Removed	Values Added
Summary		(es) NVIDIA CUDA Toolkit para todas las plataformas contiene una vulnerabilidad en el binario cuobjdump donde un usuario puede causar una lectura fuera de límites al pasar un archivo ELF malformado a cuobjdump. Un exploit exitoso de esta vulnerabilidad puede conducir a una denegación de servicio parcial.

06 Oct 2025, 14:55

Type	Values Removed	Values Added
References	~~() https://nvd.nist.gov/vuln/detail/CVE-2025-23255 -~~	() https://nvd.nist.gov/vuln/detail/CVE-2025-23255 - Third Party Advisory
References	~~() https://nvidia.custhelp.com/app/answers/detail/a_id/5661 -~~	() https://nvidia.custhelp.com/app/answers/detail/a_id/5661 - Vendor Advisory
References	~~() https://www.cve.org/CVERecord?id=CVE-2025-23255 -~~	() https://www.cve.org/CVERecord?id=CVE-2025-23255 - Third Party Advisory
First Time		Nvidia Nvidia cuda Toolkit
CPE		cpe:2.3:a:nvidia:cuda_toolkit::::::::

24 Sep 2025, 14:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-09-24 14:15

Updated : 2026-06-17 08:52

NVD link : CVE-2025-23255

Mitre link : CVE-2025-23255

CVE.ORG link : CVE-2025-23255

JSON object : View

Products Affected

nvidia

cuda_toolkit

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2025-23255", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-23255", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-24T18:43:29.737502Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.8}]}, "affected": [{"source": "psirt@nvidia.com", "affectedData": [{"vendor": "NVIDIA", "product": "NVIDIA CUDA Toolkit", "versions": [{"status": "affected", "version": "All versions prior to CUDA Toolkit 13.0"}], "platforms": ["Windows", "Linux"], "defaultStatus": "unaffected"}]}], "published": "2025-09-24T14:15:46.890", "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23255", "tags": ["Third Party Advisory"], "source": "psirt@nvidia.com"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5661", "tags": ["Vendor Advisory"], "source": "psirt@nvidia.com"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2025-23255", "tags": ["Third Party Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary where a user may cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability may lead to a partial denial of service."}, {"lang": "es", "value": "NVIDIA CUDA Toolkit para todas las plataformas contiene una vulnerabilidad en el binario cuobjdump donde un usuario puede causar una lectura fuera de l\u00edmites al pasar un archivo ELF malformado a cuobjdump. Un exploit exitoso de esta vulnerabilidad puede conducir a una denegaci\u00f3n de servicio parcial."}], "lastModified": "2026-06-17T08:52:57.733", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "970ED8B6-06F1-46FF-B2A7-F55E719FB1CA", "versionEndExcluding": "13.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@nvidia.com"}