CVE-2024-53872
Severity
3.3LOW
EPSS
0.0%
top 92.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 25
Description
NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:LExploitability: 1.8 | Impact: 1.4
Affected Packages2 packages
🔴Vulnerability Details
3OSV▶
CVE-2024-53872: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a ma↗2025-02-25
GHSA▶
GHSA-c499-vvj4-hwww: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a ma↗2025-02-25
CVEList▶
CVE-2024-53872: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a ma↗2025-02-25
📋Vendor Advisories
1Debian▶
CVE-2024-53872: nvidia-cuda-toolkit - NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump ...↗2024