CVE catalog

CVE-2023-25512

nvidia-cuda-toolkit: CVE-2023-25512

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
0.26% · Oct 25, 2026

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiannvidia-cuda-toolkitsid12.4.1-8.2fixed
Debiannvidia-cuda-toolkittrixie12.4.1-2fixed
Debiannvidia-cuda-toolkitbookworm11.8.0-5~deb12u1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiannvidia-cuda-toolkitsourcesid12.1.0-2unimportantNot reported[1034799]
Debiannvidia-cuda-toolkitsourcetrixie12.1.0-2unimportantNot reported[1034799]
Debiannvidia-cuda-toolkitsourcebookworm(unfixed)unimportantNot reported[1034799]

[Debian bug #1034799]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]