Home » Database

AVID-2026-R1187

Description

Vulnerability CVE-2023-25513

Details

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure.

Reason for inclusion in AVID: CVE-2023-25513 describes a local out-of-bounds read in cuobjdump within the NVIDIA CUDA toolkit, potentially leading to code execution, information disclosure, or DoS. cuobjdump is part of the CUDA toolkit, a software component widely used in AI workflows (GPUs, ML frameworks, tooling, and deployment/ocean stacks). As such, it is a software supply-chain component affecting general-purpose AI systems. The report provides explicit vulnerability behavior and impacts, satisfying evidence requirements.

References

Affected or Relevant Artifacts

  • Developer: NVIDIA
  • Deployer: NVIDIA
  • Artifact Details:
TypeName
SystemNVIDIA CUDA Toolkit

Impact

AVID Taxonomy Categorization

  • Risk domains: Security
  • SEP subcategories: S0100: Software Vulnerability
  • Lifecycle stages: L06: Deployment

CVSS

Version3.1
Vector StringCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Base Score5.3
Base Severity🟠 Medium
Attack VectorLOCAL
Attack Complexity🟢 Low
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
Confidentiality Impact🟢 Low
Integrity Impact🟢 Low
Availability Impact🟢 Low

CWE

IDDescription
CWE-125CWE-125 Out-of-bounds Read

Other information

  • Report Type: Advisory
  • Credits:
  • Date Reported: 2023-04-22
  • Version: 0.3.3
  • AVID Entry