CVE-2025-23308

Public on 2025-09-24
Modified on 2025-10-13
Description
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the user to run nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running nvdisasm.
Severity
Important severity
Important
See what this means
CVSS v3 Base Score
7.8
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2023 cuda-nvdisasm-12-5 No Fix Planned
Amazon Linux 2023 cuda-nvdisasm-12-6 No Fix Planned
Amazon Linux 2023 cuda-nvdisasm-12-8 No Fix Planned
Amazon Linux 2023 cuda-nvdisasm-12-9 No Fix Planned
Amazon Linux 2023 cuda-nvdisasm-13-0 2025-08-04 ALAS2023NVIDIA-2025-145 Fixed

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD CVSSv3 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H