CVE-2025-23339
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may...
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running cuobjdump.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running cuobjdump.
- Record
CVE-2025-23339- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2025-30965
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running cuobjdump.
- Record
EUVD-2025-30965- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-68h8-653h-4qm6
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may...
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running cuobjdump.
- Record
GHSA-68h8-653h-4qm6- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Weakness
- CWE-121
- Updated
- 2026-11-02
NVD
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running cuobjdump.
- Record
CVE-2025-23339- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
OSV
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running cuobjdump.
- Record
CVE-2025-23339- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-23339
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running cuobjdump.
- Record
DEBIAN-CVE-2025-23339- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-23339
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running cuobjdump.
- Record
UBUNTU-CVE-2025-23339- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nvidia-cuda-toolkitDebian:12 |
All versions, plus listed versions 10.0.130-110.0.130-210.0.130-310.1.105-110.1.105-2 Show 45 moreShow less10.1.105-310.1.168-110.1.168-1010.1.168-1110.1.168-210.1.168-310.1.168-410.1.168-510.1.168-610.1.168-710.1.168-7~bpo10+110.1.168-810.1.168-910.1.243-110.1.243-210.1.243-310.1.243-410.1.243-510.1.243-610.1.243-6~bpo10+110.1.243-710.1.243-810.2.89-110.2.89-210.2.89-310.2.89-410.2.89-510.2.89-5~bpo10+111.0.2-111.0.3-111.0.3-211.0.3-311.1.0-111.1.1-111.1.1-211.1.1-311.1.1-3~bpo10+111.1.1-411.2.0-111.2.0-211.2.0-2~bpo10+111.2.1-111.2.1-211.2.1-2~bpo10+111.2.2-1 |
None known |
nvidia-cuda-toolkitDebian:13 |
All versions, plus listed versions 10.0.130-110.0.130-210.0.130-310.1.105-110.1.105-2 Show 45 moreShow less10.1.105-310.1.168-110.1.168-1010.1.168-1110.1.168-210.1.168-310.1.168-410.1.168-510.1.168-610.1.168-710.1.168-7~bpo10+110.1.168-810.1.168-910.1.243-110.1.243-210.1.243-310.1.243-410.1.243-510.1.243-610.1.243-6~bpo10+110.1.243-710.1.243-810.2.89-110.2.89-210.2.89-310.2.89-410.2.89-510.2.89-5~bpo10+111.0.2-111.0.3-111.0.3-211.0.3-311.1.0-111.1.1-111.1.1-211.1.1-311.1.1-3~bpo10+111.1.1-411.2.0-111.2.0-211.2.0-2~bpo10+111.2.1-111.2.1-211.2.1-2~bpo10+111.2.2-1 |
None known |
nvidia-cuda-toolkitUbuntu:16.04:LTS |
All versions, plus listed versions 6.5.14-26.5.19-27.0.28-17.0.28-27.0.28-2ubuntu17.5.18-0ubuntu1 |
None known |
nvidia-cuda-toolkitUbuntu:18.04:LTS |
All versions, plus listed versions 8.0.61-18.0.61-28.0.61-39.0.176-29.1.85-19.1.85-2ubuntu19.1.85-39.1.85-3ubuntu1 |
None known |
nvidia-cuda-toolkitUbuntu:20.04:LTS |
All versions, plus listed versions 10.1.168-1build110.1.168-210.1.168-310.1.243-1ubuntu210.1.243-1ubuntu310.1.243-210.1.243-3 |
None known |
nvidia-cuda-toolkitUbuntu:22.04:LTS |
All versions, plus listed versions 11.3.1-411.3.1-511.4.3-111.4.3-1build111.5.1-1build111.5.1-1ubuntu1 |
None known |
nvidia-cuda-toolkitUbuntu:24.04:LTS |
All versions, plus listed versions 12.0.1-212.0.1-312.0.1-412.0.1-4build112.0.1-4build312.0.1-4build4 |
None known |
nvidia-cuda-toolkitUbuntu:25.10 |
All versions, plus listed versions 12.2.2-2build112.3.2-112.4.1-212.4.1-412.4.1-4build1 |
None known |
nvidia-cuda-toolkitUbuntu:26.10 |
All versions, plus listed versions 12.4.1-812.4.1-8.112.4.1-8.212.4.1-8.2build112.4.1-8.2ubuntu112.4.1-8.2ubuntu2 |
None known |
nvidia-cuda-toolkitUbuntu:26.04:LTS |
All versions, plus listed versions 12.4.1-4build112.4.1-512.4.1-6build112.4.1-6build212.4.1-8 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | SpiralBL0CK/ce-for-CVE-2025-23339 | 2025-12-16 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-23339 is a low vulnerability (CVSS 3.3) in Nvidia Cuda Toolkit, published September 24, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. No source names a fixed version.
References
nvd.nist.gov/vuln/detail/CVE-2025-23339
cve.org/CVERecord?id=CVE-2025-23339
nvidia.custhelp.com/app/answers/detail/a_id/5661
talosintelligence.com/vulnerability_reports/TALOS-2025-2155
github.com/advisories/GHSA-68h8-653h-4qm6
security-tracker.debian.org/tracker/CVE-2025-23339
ubuntu.com/security/CVE-2025-23339
Left out here: 330 versions. The JSON record has them.