Stack-Based Buffer Overflow in NVIDIA CUDA Toolkit cuobjdump
CVE-2025-23339

3.3LOW

Key Information:

Vendor

Nvidia
Status
Nvidia Cuda Toolkit
Vendor
CVE Published:
24 September 2025

What is CVE-2025-23339?

The NVIDIA CUDA Toolkit contains a vulnerability in the cuobjdump utility that can be exploited by an attacker. By tricking a user into executing cuobjdump on a specially crafted ELF file, an attacker can trigger a stack-based buffer overflow. This could potentially allow for arbitrary code execution with the same privileges as the user running the tool. The impact of this vulnerability underscores the importance of careful file handling and user awareness.

Affected Version(s)

NVIDIA CUDA Toolkit Windows All versions prior to CUDA Toolkit 13.0

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23339
https://www.cve.org/CVERecord?id=CVE-2025-23339
https://nvidia.custhelp.com/app/answers/detail/a_id/5661

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.