CVE-2025-23267

HIGH EPSS 47.7%

Published Jul 17, 202511mo ago · Modified Jun 17, 20262w ago

8.5 CVSS 3.1

High

Published Jul 17, 2025 11mo ago

Last Modified Jun 17, 2026 2w ago

Description

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service.

CVSS Details

Base Score

8.5

Exploitability

3.1

Impact

4.7

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Changed

Confidentiality None

Integrity Low

Availability High

Threat Intelligence

EPSS Exploit Probability

47.7% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-59

References 2

openwall.com http://www.openwall.com/lists/oss-security/2025/07/16/3
nvidia.custhelp.com https://nvidia.custhelp.com/app/answers/detail/a_id/5659

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.