NVIDIA Cuda Toolkit vulnerabilities

46 CVEs affecting NVIDIA Cuda Toolkit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-33231, published 2026-01-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-21821, published 2022-03-29. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted…
CVE-2025-33230, published 2026-01-20. High severity, CVSS 7.3. EPSS: 1.4% chance of exploitation in the next 30 days. NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A…
CVE-2025-33228, published 2026-01-20. High severity, CVSS 7.3. EPSS: 1.4% chance of exploitation in the next 30 days. NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the process_nsys_rep_cli.py script…
CVE-2020-5991, published 2020-10-30. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in the NVJPEG library in which an out-of-bounds read or write operation may lead to code execution, denial of service, or…
CVE-2022-34667, published 2022-11-19. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer overflow condition by persuading a local…
CVE-2011-0636, published 2011-01-22. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer drivers for Linux 260.19.26, and possibly other versions, do not initialize pinned memory, which allows…
CVE-2025-23339, published 2025-09-24. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A…
CVE-2025-23247, published 2025-05-27. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute…
CVE-2023-25513, published 2023-04-22. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file.…
CVE-2023-25512, published 2023-04-22. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump on a malformed input file. A successful…

Latest

CVE-2025-33231, published 2026-01-20. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL…
CVE-2025-33229, published 2026-01-20. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the NVIDIA Nsight Visual Studio Edition…
CVE-2025-23346, published 2025-09-24. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to a limited denial of…
CVE-2025-23340, published 2025-09-24. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of…
CVE-2025-23338, published 2025-09-24. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write by running nvdisasm on a malicious ELF file. A successful exploit of this…
CVE-2025-23308, published 2025-09-24. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the user to run nvdisasm on a malicious ELF file. A…
CVE-2025-23275, published 2025-09-24. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by providing certain image dimensions. A successful…