CNNVD-202509-3867 Information

CNNVD ID

CNNVD-202509-3867

CVE-2025-23339

  • CNNVD Published: 2025-09-24

Description (Chinese)

NVIDIA CUDA toolkit是美国英伟达(NVIDIA)公司的一个工具包。为创建高性能 GPU 加速应用程序提供了一个开发环境。 NVIDIA CUDA Toolkit存在安全漏洞,该漏洞源于cuobjdump在处理恶意ELF文件时存在栈缓冲区溢出,可能导致任意代码执行。

Description (English)

NVIDIA CUDA toolkit is a toolkit for NVIDIA in the United States. A development environment was provided for the creation of high performance GPU acceleration applications. NVIDIA CUDA Toolkit has a security loophole, which originates from the cuobjdump ’ s presence of stowage buffers in the processing of malicious ELF documents, which may lead to arbitrary code enforcement.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

NZBGet

Published

2025-09-24

Last Modified

2026-02-24

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5661 https://www.cve.org/CVERecord?id=CVE-2025-23339 https://nvd.nist.gov/vuln/detail/CVE-2025-23339 https://access.redhat.com/security/cve/cve-2025-23339

Patch

https://nvidia.custhelp.com/app/answers/detail/a_id/5661

Share on: