Severity
Medium
Analysis Summary
CVE-2025-23247
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this vulnerability might lead to arbitrary code execution.
Impact
- Code Execution
Indicators of Compromise
CVE
CVE-2025-23247
Affected Vendors
- NVIDIA
Affected Products
- NVIDIA CUDA Toolkit -12.9
Remediation
Refer to NVIDIA Security Advisory for patch, upgrade or suggested workaround information.