CVE-2025-23255lowCWE-125

CVE-2025-23255: low-severity vulnerability in NVIDIA CUDA Toolkit

Published

Follow this CVE+ Monitor NVIDIA CUDA Toolkit+ Monitor nvidia-cuda-toolkit

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.3epss 0.2%
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary where a user may cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability may lead to a partial denial of service.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
NVIDIA · NVIDIA CUDA Toolkit
Related CVEs — NVIDIA CUDA Toolkit

In the same product, most dangerous first.

CVE-2022-21821HIGHCVE-2022-21821EPSS 2.1%CVE-2020-5991—CVE-2020-5991EPSS 0.5%CVE-2022-34667MEDIUMCVE-2022-34667EPSS 0.4%CVE-2025-23339LOWCVE-2025-23339EPSS 0.4%CVE-2025-23247MEDIUMCVE-2025-23247EPSS 0.3%CVE-2023-25513MEDIUMCVE-2023-25513EPSS 0.3%