CNNVD-202509-3869 Information

CNNVD ID

CNNVD-202509-3869

CVE-2025-23308

  • CNNVD Published: 2025-09-24

Description (Chinese)

NVIDIA CUDA toolkit是美国英伟达(NVIDIA)公司的一个工具包。为创建高性能 GPU 加速应用程序提供了一个开发环境。 NVIDIA CUDA Toolkit存在安全漏洞,该漏洞源于nvdisasm处理恶意ELF文件时存在堆缓冲区溢出,可能导致任意代码执行。

Description (English)

NVIDIA CUDA toolkit is a toolkit for NVIDIA in the United States. A development environment was provided for the creation of high performance GPU acceleration applications. There is a security gap in NVIDIA CUDA Toolkit, which stems from the proliferation of buffer zones that may lead to arbitrary code implementation when NVdisasm processes malicious ELF documents.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

NZBGet

Published

2025-09-24

Last Modified

2026-02-24

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5661 https://www.cve.org/CVERecord?id=CVE-2025-23308 https://nvd.nist.gov/vuln/detail/CVE-2025-23308 https://access.redhat.com/security/cve/cve-2025-23308

Patch

https://nvidia.custhelp.com/app/answers/detail/a_id/5661

Share on: