CVE-2024-0076

CWE-125 — Out-of-bounds Read5 documents5 sources

Severity

3.3LOW

EPSS

0.0%

top 93.53%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Nvidia Cuda Toolkit Nvidia Nvidia Cuda Toolkit

Timeline

PublishedApr 5

Description

NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:LExploitability: 1.8 | Impact: 1.4

Affected Packages3 packages

▶NVDnvidia/cuda_toolkit< 12.4.0

▶Debiannvidia-cuda-toolkit< 12.4.1-1+1

▶CVEListV5nvidia/nvidia_cuda_toolkitAll versions prior to CUDA Toolkit v12.4

🔴Vulnerability Details

CVEList

CVE-2024-0076: NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into r↗2024-04-05

▶

OSV

CVE-2024-0076: NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into r↗2024-04-05

▶

GHSA

GHSA-vhhh-r6h5-2r9f: NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into r↗2024-04-05

▶

📋Vendor Advisories

Debian

CVE-2024-0076: nvidia-cuda-toolkit - NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and ...↗2024

▶