CVE-2025-23247

CVE-2025-23247 @reubensammut와 함께하는 대박 콜라보 : 언제나 그렇듯 : CVE-2025-23247에 대한 WIP입니다. 현재는 그냥 크래시 PoC로, 버퍼와 오프셋을 제어할 수 있음을 보여주므로 aaw를 확보했습니다. 버그 출처: https://talosintelligence.com/vulnerabilityreports/TALOS-2025-2151 checksec ./cuobjdump '/home/vlad/cuobjdump' Arch: amd64-64-little RELRO: Partial RELRO...

Amazon Linux 2023 : cuda (ALAS2023NVIDIA-2026-279)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-279 advisory. NVIDIA CUDA Toolkit contains a vulnerability in command cuobjdump where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may le...

Amazon Linux 2023 : cuda-toolkit (ALAS2023NVIDIA-2026-278)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-278 advisory. NVIDIA CUDA Toolkit contains a vulnerability in command cuobjdump where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may le...

Medium: cuda-toolkit

Issue Overview: NVIDIA CUDA Toolkit contains a vulnerability in command cuobjdump where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service. CVE-2024-0110 Affected Packages:...

Medium: cuda-toolkit-12

Issue Overview: NVIDIA CUDA Toolkit contains a vulnerability in command cuobjdump where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service. CVE-2024-0110 Affected Packages:...

Amazon Linux 2023 : cuda (ALAS2023NVIDIA-2025-013)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-013 advisory. NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A...

Amazon Linux 2023 : cuda-toolkit (ALAS2023NVIDIA-2025-031)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-031 advisory. NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A...

CVE-2023-25511

NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division-by-zero error may enable a user to cause a crash, which may lead to a limited denial of service...

CVE-2025-23339

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege leve...

CVE-2025-23255

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary where a user may cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability may lead to a partial denial of service...

CVE-2023-25512

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited...

ROS-20251112-06

A vulnerability in the NVIDIA CUDA GPU parallel computing software toolkit is related to boundary conditions in cuobjdump and nvdisasm. Toolkit is related to boundary conditions in cuobjdump and nvdisasm. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20251111-02

A vulnerability in the NVIDIA CUDA parallel computing software toolkit for NVIDIA CUDA GPUs Toolkit is related to null pointer dereferencing error in cuobjdump and nvdisasm. Exploitation The vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the cuobjdump utility in the parallel computing software for NVIDIA CUDA Toolkit allows a hacker to execute arbitrary code.

The vulnerability of the cuobjdump utility, a software tool for parallel computing on NVIDIA CUDA GPUs, is related to incorrect handling of length mismatches in parameters. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created ELF file...

The vulnerability of the cuobjdump utility in the NVIDIA CUDA Toolkit, a parallel computing software tool, allows a malicious individual to gain access to confidential information or cause system failures.

The vulnerability of the cuobjdump utility, a software tool for parallel computing on NVIDIA CUDA GPUs, relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to access confidential information or cause system failures...

The vulnerability of the cuobjdump utility in the NVIDIA CUDA Toolkit, a parallel computing software tool, allows a malicious actor to cause a system failure.

The vulnerability of the cuobjdump utility, a software tool for parallel computing on NVIDIA CUDA GPUs, is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially crafted ELF file...

The vulnerability of the cuobjdump utility in the NVIDIA CUDA Toolkit, a parallel computing software suite for graphics processors, allows for the execution of arbitrary code or triggering of a service failure.

The vulnerability of the cuobjdump utility, a software tool for parallel computing on NVIDIA CUDA GPUs, relates to buffer overflow attacks. Exploiting this vulnerability can allow attackers to execute arbitrary code or cause system failures using a specially crafted ELF file...

The vulnerability of the cuobjdump utility in the NVIDIA CUDA Toolkit, a parallel computing software tool, allows a malicious actor to cause a system failure.

The vulnerability of the cuobjdump utility, a software tool for parallel computing on NVIDIA CUDA GPUs, relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure using a specially created malicious ELF file...

ROS-20251031-04

Vulnerability of cuobjdump file of parallel computing software tool for GPUs NVIDIA CUDA Toolkit is related to pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in the cuobjdump file of the NVIDIA CUDA Toolkit GPU parallel...

ROS-20251027-02

A vulnerability in the NVIDIA CUDA GPU parallel computing software toolkit is related to insufficient validation of user input data. Toolkit is related to insufficient verification of user input in the command line tool nvdisasm. Exploitation of the vulnerability could allow an attacker to cause ...