PT-2025-23013 · Nvidia+2 · Nvidia Cuda Toolkit+2

Dimitrios Tatsis · Published 2025-02-13 · Updated 2025-11-20 · CVE-2025-23247

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit (affected versions not specified)

Description The NVIDIA CUDA Toolkit contains a flaw within the cuobjdump binary. This issue stems from a failure to validate the length of a buffer when processing an ELF file. Exploitation involves providing a specially crafted, malformed ELF file, which could lead to arbitrary code execution. The cuobjdump tool may crash or execute unintended code due to this insufficient buffer length check. The vulnerability allows control over a buffer and its offset, potentially enabling arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Integer Overflow

Weakness Enumeration

CWE-130

CWE-190

Related Identifiers

BDU:2025-13649

CVE-2025-23247

Affected Products

Debian

Nvidia Cuda Toolkit

Red Os

References · 18

• https://cve.org/CVERecord?id=CVE-2025-23247 · Security Note
• https://bdu.fstec.ru/vul/2025-13649 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-23247 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-23247 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-23247 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-23247 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5643 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-23247 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23247 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5577 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-cuda-27102025 · Note
• https://twitter.com/CVEnew/status/1927413125050941647 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-cuda-27102025/?sphrase_id=1334399 · Note
• https://twitter.com/akaclandestine/status/1991548531635810817 · Twitter Post
• https://t.me/cvenotify/124370 · Telegram Post