Heap-Based Buffer Overflow in NVIDIA CUDA Toolkit
CVE-2025-23308
What is CVE-2025-23308?
The NVIDIA CUDA Toolkit for all platforms is susceptible to a vulnerability in nvdisasm, which can be exploited through a malicious ELF file. By persuading a user to execute nvdisasm on this crafted file, an attacker can trigger a heap-based buffer overflow, potentially leading to arbitrary code execution with the user's permissions. It is crucial for users of the CUDA Toolkit to remain vigilant and implement security measures to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
NVIDIA CUDA Toolkit Windows All versions prior to CUDA Toolkit 13.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved