CVE-2024-0109

NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file. A successful exploit of this vulnerability may cause an out of bounds read in the unprivileged process memory which could lead to a limited denial of service.

Score

CVSS 3.1 3.3 Low

Status

Analyzed - psirt@nvidia.com

Published

2024-08-31

Last modified

2024-09-03

Weaknesses

CWE-125

Affected products

• Cuda Toolkit (Nvidia)
• Nvidia Cuda Toolkit (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5564