Out-of-Bounds Read Vulnerability in NVIDIA CUDA Toolkit
CVE-2025-23340

3.3LOW

Key Information:

Vendor

Nvidia

Vendor
CVE Published:
24 September 2025

What is CVE-2025-23340?

The NVIDIA CUDA Toolkit features a vulnerability in the nvdisasm binary, which can be exploited by passing a malformed ELF file. This can lead to an out-of-bounds read scenario, potentially resulting in a partial denial of service. It is crucial for users and administrators to be aware of this vulnerability to implement effective mitigation strategies and safeguard their systems.

Affected Version(s)

NVIDIA CUDA Toolkit Windows All versions prior to CUDA Toolkit 13.0

References

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.