3.3Low

CVE-2024-53873

NVIDIA CUDA Toolkit Published: (1 year ago)

Description

NVIDIA CUDA toolkit for Windows contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service.

Weakness (CWE): CWE-125

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
NVIDIA CUDA Toolkit All versions up to CUDA Toolkit 12.8

References and patches

CPE matches (NVD) (1)

  • cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:* < 12.8.0