Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:42524
HistoryAug 06, 2023 - 11:50 p.m.

Out-of-Bounds Read

2023-08-0623:50:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
nvidia
cuda
toolkit
out-of-bounds read
cuobjdump
vulnerability
attacker
input file
security

6.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

0.0005 Low

EPSS

Percentile

16.2%

nvidia-cuda-toolkit is vulnerable to Out-of-Bounds Read. The vulnerability exists in cuobjdump which allows an attacker to cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file.

6.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

0.0005 Low

EPSS

Percentile

16.2%