CNNVD-202509-3875 Information

CNNVD ID

CNNVD-202509-3875

CVE-2025-23255

  • CNNVD Published: 2025-09-24

Description (Chinese)

NVIDIA CUDA toolkit是美国英伟达(NVIDIA)公司的一个工具包。为创建高性能 GPU 加速应用程序提供了一个开发环境。 NVIDIA CUDA Toolkit存在缓冲区错误漏洞,该漏洞源于cuobjdump二进制文件处理畸形ELF文件时存在越界读取,可能导致部分拒绝服务。

Description (English)

NVIDIA CUDA toolkit is a toolkit for NVIDIA in the United States. A development environment was provided for the creation of high performance GPU acceleration applications. NVIDIA CUDA Toolkit has a buffer zone error loophole, which stems from the existence of cross-border access to the cuobjdump binary file for the processing of abnormal ELF documents, which may lead to partial denial of services.

Hazard Level

Critical

Vulnerability Type

缓冲区错误

Affected Vendor

NZBGet

Published

2025-09-24

Last Modified

2026-02-24

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5661 https://nvd.nist.gov/vuln/detail/CVE-2025-23255 https://www.cve.org/CVERecord?id=CVE-2025-23255 https://access.redhat.com/security/cve/cve-2025-23255

Patch

https://nvidia.custhelp.com/app/answers/detail/a_id/5661

Share on: