3.3
CVE-2025-23340
- EPSS 0.17%
- Veröffentlicht 24.09.2025 14:15:48
- Zuletzt bearbeitet 03.11.2025 19:15:48
- Quelle psirt@nvidia.com
- CVE-Watchlists
- Unerledigt
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Cuda Toolkit Version < 13.0.0
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.062 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| psirt@nvidia.com | 3.3 | 1.8 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
https://nvidia.custhelp.com/app/answers/detail/a_id/5661
https://nvd.nist.gov/vuln/detail/CVE-2025-23340
https://www.cve.org/CVERecord?id=CVE-2025-23340
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2172