CVE-2025-23308
Public on 2025-09-24
Modified on 2025-10-13
Description
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the user to run nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running nvdisasm.
Severity
See what this means
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2023 | cuda-nvdisasm-12-5 | No Fix Planned | ||
| Amazon Linux 2023 | cuda-nvdisasm-12-6 | No Fix Planned | ||
| Amazon Linux 2023 | cuda-nvdisasm-12-8 | No Fix Planned | ||
| Amazon Linux 2023 | cuda-nvdisasm-12-9 | No Fix Planned | ||
| Amazon Linux 2023 | cuda-nvdisasm-13-0 | 2025-08-04 | ALAS2023NVIDIA-2025-145 | Fixed |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | CVSSv3 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |