CVE-2024-0109 — NVIDIA / NVIDIA CUDA Toolkit

CVE-2024-0109

NVIDIA / NVIDIA CUDA Toolkit PUBLISHED

Description (CNA)

NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file. A successful exploit of this vulnerability may cause an out of bounds read in the unprivileged process memory which could lead to a limited denial of service.

Affected (CNA)

Vendor / product	Versions
NVIDIA / NVIDIA CUDA Toolkit	affected All versions up to and including CUDA Toolkit 12.6

CWE

CWE-125

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5564

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.