CVE-2024-0102

2024-08-0817:15:18

CWE-125

[email protected]

web.nvd.nist.gov

nvidia

cuda toolkit

out-of-bounds

read

elf file

denial of service

cve-2024-0102

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

Percentile

13.4%

JSON

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds read issue by deceiving a user into reading a malformed ELF file. A successful exploit of this vulnerability might lead to denial of service.

Affected configurations

Nvd

Node

nvidiacuda_toolkitRange<12.6.0

AND

linuxlinux_kernelMatch-

microsoftwindowsMatch-

VendorProductVersionCPE
nvidiacuda_toolkit*cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nvidia	cuda_toolkit	*	cpe:2.3:a:nvidia:cuda_toolkit::::::::
linux	linux_kernel	-	cpe:2.3:o:linux:linux_kernel:-:::::::*
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*