PT-2025-39257 · Nvidia+2 · Nvidia Cuda Toolkit+3

Dimitrios Tatsis · Published 2025-09-22 · Updated 2025-12-19 · CVE-2025-23339

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit (affected versions not specified)

Description The NVIDIA CUDA Toolkit contains an issue in the cuobjdump utility. An attacker can trigger a stack-based buffer overflow by causing a user to run cuobjdump on a specially crafted malicious ELF file. Successful exploitation of this issue may lead to arbitrary code execution with the privileges of the user running cuobjdump. The vulnerability is related to out-of-bounds memory access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-12629

CVE-2025-23339

Affected Products

Debian

Nvidia Cuda Toolkit

Red Os

Cuobjdump

References · 18

• https://bdu.fstec.ru/vul/2025-12629 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-23339 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-23339 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5661 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-23339 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23339 · Security Note
• https://ubuntu.com/security/CVE-2025-23339 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-23339 · Security Note
• https://osv.dev/vulnerability/CVE-2025-23339 · Vendor Advisory
• https://reddit.com/r/CVEWatch/comments/1pqii1h/top_10_trending_cves_19122025 · Reddit Post
• https://t.me/CVEtracker/33250 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-cuda-cuobjdump-cve-2025-23255-cve-2025-23339-cve-2025-23346/?sphrase_id=1338617 · Note
• https://t.me/cveNotify/137511 · Telegram Post
• https://t.me/cveNotify/136283 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-cuda-cuobjdump-cve-2025-23255-cve-2025-23339-cve-2025-23346 · Note