Heap-Based Buffer Overflow in NVIDIA CUDA Toolkit

CVE-2025-23308

What is CVE-2025-23308?

The NVIDIA CUDA Toolkit for all platforms is susceptible to a vulnerability in nvdisasm, which can be exploited through a malicious ELF file. By persuading a user to execute nvdisasm on this crafted file, an attacker can trigger a heap-based buffer overflow, potentially leading to arbitrary code execution with the user's permissions. It is crucial for users of the CUDA Toolkit to remain vigilant and implement security measures to mitigate the risks associated with this vulnerability.

References