CVE-2024-53880

NVIDIA Triton Inference Server contains a vulnerability in the model loading API, where a user could cause an integer overflow or wraparound error by loading a model with an extra-large file size that overflows an internal variable. A successful exploit of this vulnerability might lead to denial ...

CVE-2024-0142

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2024-0112

NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker can cause an improper input validation issue by escalating certain permissions to a limited degree. A successful exploit of this vulnerability might lead to code execution, denial of service, data...

CVE-2024-0145

The CVE-2024-0145 entry concerns NVIDIA nvJPEG2000 (library version 0.8.0). TALOS documents a heap-based buffer overflow in the Ndecomp parameter handling when parsing JPEG2000 files, which can cause memory corruption and potentially arbitrary code execution. NVIDIA’s own bulletin corroborates th...

CVE-2024-0145

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2024-0145

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2024-0144

CVE-2024-0144 affects NVIDIA nvJPEG2000. Cisco Talos details describe a heap-based buffer overflow in the Ndecomp handling of nvJPEG2000 0.8.0 triggered by a specially crafted JPEG2000 file, causing memory corruption and potential arbitrary code execution. The TALOS report confirms vulnerable ver...

CVE-2024-0144

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to data tampering...

CVE-2024-0144

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to data tampering...

CVE-2024-0143

CVE-2024-0143 affects NVIDIA nvJPEG2000 library (v0.8.0). Talos details describe a memory corruption path: the Coding Style Component (COC) index (Ccoc) is used to access a per-component parameter buffer without proper bounds checks, allowing an out-of-bounds write when Csiz (number of components...

CVE-2024-0143

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2024-0143

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2024-0142

CVE-2024-0142 affects NVIDIA nvJPEG2000 (library used for JPEG2000 decoding/encoding). Talos confirms a memory corruption via an out-of-bounds write in the nvJPEG2000 decoding path when parsing the SIZ/ Csiz and QCC components, where an attacker can supply a crafted JPEG2000 file to trigger an ou...

CVE-2024-0142

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2024-0142

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

NVIDIA nvJPEG2000 安全漏洞

NVIDIA nvJPEG2000 is a library from NVIDIA, Inc. for decoding and encoding JPEG2000 images on NVIDIA GPUs. A security vulnerability exists in NVIDIA nvJPEG2000 version 0.8.0, which stems from an out-of-bounds write issue that can be caused by an attacker via a specially crafted JPEG2000 file, and...

NVIDIA Container Toolkit 安全漏洞

NVIDIA Container Toolkit is a container toolkit from NVIDIA, Inc. Allows users to build and run GPU-accelerated containers. A security vulnerability exists in NVIDIA Container Toolkit versions prior to 24.9.2, which stems from the inclusion of a time-of-check time-of-use TOCTOU vulnerability when...

NVIDIA nvJPEG2000 安全漏洞

NVIDIA nvJPEG2000 is a library from NVIDIA, Inc. for decoding and encoding JPEG2000 images on NVIDIA GPUs. A security vulnerability exists in NVIDIA nvJPEG2000 version 0.8.0, which originates from a heap-based buffer overflow issue that can be caused by an attacker via a specially crafted JPEG200...

NVIDIA nvJPEG2000 安全漏洞

NVIDIA nvJPEG2000 is a library from NVIDIA, Inc. for decoding and encoding JPEG2000 images on NVIDIA GPUs. A security vulnerability exists in NVIDIA nvJPEG2000 version 0.8.0, which stems from a buffer overflow issue that can be caused by an attacker with a specially crafted JPEG2000 file, and...

The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows a hacker to execute arbitrary code, trigger service failures, or disclose sensitive information.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause service failures, or disclose sensitive information...