CVE-2025-23339: 
CUDA Toolkit vulnerability analysis and mitigation

NVIDIA CUDA Toolkit contains a vulnerability (CVE-2025-23339) in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. This vulnerability was discovered by Dimitrios Tatsis of Cisco Talos and disclosed in September 2025, affecting all versions of CUDA Toolkit prior to version 13.0 (NVIDIA Security, Talos Blog).

The vulnerability exists in the DWARF parsing functionality of NVIDIA cuobjdump 12.8.55. It is classified as a stack-based buffer overflow (CWE-121) with a CVSS v3.1 Base Score of 3.3 (Low) and vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N. The vulnerability requires local access and user interaction to be exploited (NVIDIA Security).

A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running cuobjdump. The attack can result in information disclosure and potential execution of malicious code with user privileges (NVIDIA Security, Talos Blog).

NVIDIA has released a security update to address this vulnerability. Users are advised to upgrade to CUDA Toolkit version 13.0 or later to protect their systems (NVIDIA Security).