Known vulnerabilities in CUDA Toolkit

Vendor: nVidia
Software: CUDA Toolkit
Software CPE: cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*
Total vulnerabilities: 38
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CUDA Toolkit CUDA Toolkit is affected by 38 known vulnerabilities: 4 high, 19 medium, 15 low Critical High Medium Low

Vulnerabilities (38)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131726 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-33228
CWE-78 Medium
No
No
13.1.0 18.05.2026 SB2026051886
#VU131727 - Uncontrolled Search Path Element
CVE-2025-33229
CWE-427 Medium
No
No
13.1.0 18.05.2026 SB2026051886
#VU131728 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-33230
CWE-78 Medium
No
No
13.1.0 18.05.2026 SB2026051886
#VU131729 - Uncontrolled Search Path Element
CVE-2025-33231
CWE-427 Medium
No
No
13.1.0 18.05.2026 SB2026051886
#VU116171 - NULL Pointer Dereference
CVE-2025-23346
CWE-476 Medium
No
No
13.0.0 29.09.2025 SB2025092950
#VU116170 - Heap-based Buffer Overflow
CVE-2025-23308
CWE-122 High
No
No
13.0.0 29.09.2025 SB2025092950
#VU116168 - Stack-based buffer overflow
CVE-2025-23339
CWE-121 High
No
No
13.0.0 29.09.2025 SB2025092950
#VU116166 - Out-of-bounds read
CVE-2025-23255
CWE-125 Medium
No
No
13.0.0 29.09.2025 SB2025092950
#VU116165 - Out-of-bounds read
CVE-2025-23340
CWE-125 Medium
No
No
13.0.0 29.09.2025 SB2025092950
#VU116164 - Out-of-bounds read
CVE-2025-23271
CWE-125 Medium
No
No
13.0.0 29.09.2025 SB2025092950
#VU116163 - Out-of-bounds read
CVE-2025-23248
CWE-125 Medium
No
No
13.0.0 29.09.2025 SB2025092950
#VU116161 - Divide By Zero
CVE-2025-23273
CWE-369 Low
No
No
13.0.0 29.09.2025 SB2025092948
#VU116159 - Improper Validation of Array Index
CVE-2025-23338
CWE-129 Low
No
No
13.0.0 29.09.2025 SB2025092950
#VU116158 - Out-of-bounds write
CVE-2025-23275
CWE-787 Low
No
No
13.0.0 29.09.2025 SB2025092948
#VU116157 - Out-of-bounds read
CVE-2025-23274
CWE-125 Low
No
No
13.0.0 29.09.2025 SB2025092948
#VU116154 - Out-of-bounds read
CVE-2025-23272
CWE-125 Low
No
No
12.9 Update 1 29.09.2025 SB2025092925
#VU109862 - Memory corruption
CVE-2025-23247
CWE-119 High
Available
No
12.9.0 27.05.2025 SB2025052758
#VU104221 - Improper input validation
CVE-2024-53879
CWE-20 Low
No
No
12.8.0 26.02.2025 SB2025022636
#VU104220 - Improper input validation
CVE-2024-53878
CWE-20 Low
No
No
12.8.0 26.02.2025 SB2025022636
#VU104219 - NULL Pointer Dereference
CVE-2024-53877
CWE-476 Medium
No
No
12.8.0 26.02.2025 SB2025022636


Showing elements 1 - 20 out of 38