Multiple Vulnerabilities Discovered in NVIDIA CUDA Toolkit

This Unit 42 report describes nine vulnerabilities discovered in NVIDIA CUDA Toolkit command-line utilities cuobjdump (six issues) and nvdisasm (three issues), including integer overflows and out-of-bounds reads (CVEs assigned, CVSS 2.8–3.3). The issues could allow limited denial-of-service or information disclosure (and one reported heap overflow with potential code execution), and NVIDIA released an update in February 2025 to address them; Unit 42 recommends updating to the latest CUDA Toolkit and notes Palo Alto Networks protections.