Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47107
HistoryMay 22, 2024 - 6:26 a.m.

Out-of-bounds Read

2024-05-2206:26:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
nvidia-cuda-toolkit
out-of-bounds read
cuobjdump
denial of service

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

AI Score

6.5

Confidence

High

nvidia-cuda-toolkit is vulnerable to an out-of-bounds read. The vulnerability is due to an issue in cuobjdump, where an attacker can exploit this by tricking a user into running cuobjdump on a malformed input file, potentially leading to limited denial of service.

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

AI Score

6.5

Confidence

High