Out-of-Bounds Read Vulnerability in NVIDIA CUDA Toolkit
CVE-2025-23271

3.3LOW

Key Information:

Vendor

Nvidia
Status
Nvidia Cuda Toolkit
Vendor
CVE Published:
24 September 2025

What is CVE-2025-23271?

The NVIDIA CUDA Toolkit is susceptible to a vulnerability in the nvdisasm binary, which occurs when a user processes a malformed ELF file. This loophole leads to an out-of-bounds read that can potentially result in a partial denial of service. Users are encouraged to review their systems and implement appropriate safeguards to mitigate risks associated with this vulnerability.

Affected Version(s)

NVIDIA CUDA Toolkit Windows All versions prior to CUDA Toolkit 13.0

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23271
https://www.cve.org/CVERecord?id=CVE-2025-23271
https://nvidia.custhelp.com/app/answers/detail/a_id/5661

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.