CVE-2024-0111

2024-08-3109:15:06

CWE-1284

nvidia

web.nvd.nist.gov

nvidia

cuda toolkit

cuobjdump

vulnerability

denial of service

data tampering

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

AI Score

6.9

Confidence

High

EPSS

Percentile

13.4%

JSON

NVIDIA CUDA Toolkit contains a vulnerability in command ‘cuobjdump’ where a user may cause a crash or produce incorrect output by passing a malformed ELF file. A successful exploit of this vulnerability may lead to a limited denial of service or data tampering.

Affected configurations

Nvd

Node

nvidiacuda_toolkitRange≤12.6.0

VendorProductVersionCPE
nvidiacuda_toolkit*cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nvidia	cuda_toolkit	*	cpe:2.3:a:nvidia:cuda_toolkit::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "Linux"
    ],
    "product": "CUDA Toolkit",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions up to and including CUDA Toolkit 12.6"
      }
    ]
  }
]