CVE-2024-0109

2024-09-0205:40:09

redhat.com

access.redhat.com

nvidia

cuda toolkit

cuobjdump

elf file

vulnerability

out of bounds read

denial of service

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

3.9

Confidence

High

EPSS

Percentile

13.5%

JSON

A flaw was found in NVIDIA CUDA Toolkit. Affected versions of this package contain a vulnerability in command cuobjdump, where a user may cause a crash by passing in a malformed ELF file. This issue may allow an out of bounds read in the unprivileged process memory, which could lead to a limited denial of service.