Exploitation Summary
EIP tracks 2 public exploits for CVE-2025-23247. PoCs published by SpiralBL0CK, adminlove520.
AI-analyzed exploit summary This PoC demonstrates a buffer overflow vulnerability in NVIDIA's cuobjdump tool (CVE-2025-23247) by crafting a malicious .nv_debug_source section in a CUDA binary (cubin) file. The exploit leverages an integer overflow to achieve arbitrary write control, with a focus on crashing the target for further exploitation.
Description
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this vulnerability might lead to arbitrary code execution.
Exploits (2)
This PoC demonstrates a buffer overflow vulnerability in NVIDIA's cuobjdump tool (CVE-2025-23247) by crafting a malicious .nv_debug_source section in a CUDA binary (cubin) file. The exploit leverages an integer overflow to achieve arbitrary write control, with a focus on crashing the target for further exploitation.
The repository contains a scanner for CVE-2024-21762, a Fortinet SSL VPN vulnerability, which checks for the presence of the vulnerability by sending crafted HTTP requests. It includes Python scripts to test individual hosts or lists of IPs for vulnerability status.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N