CVE catalog

CVE-2023-25513

nvidia-cuda-toolkit: CVE-2023-25513

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
0.26% · Oct 25, 2026

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiannvidia-cuda-toolkitsid12.4.1-8.2fixed
Debiannvidia-cuda-toolkittrixie12.4.1-2fixed
Debiannvidia-cuda-toolkitbookworm11.8.0-5~deb12u1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiannvidia-cuda-toolkitsourcesid12.0.1-1unimportantNot reported[1041887]
Debiannvidia-cuda-toolkitsourcetrixie12.0.1-1unimportantNot reported[1041887]
Debiannvidia-cuda-toolkitsourcebookworm(unfixed)unimportantNot reported[1041887]

[Debian bug #1041887]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]