CVE-2024-0124 — NVIDIA / CUDA Toolkit

CVE-2024-0124

NVIDIA / CUDA Toolkit PUBLISHED

Description (CNA)

NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by running it on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service.

Affected (CNA)

Vendor / product	Versions
NVIDIA / CUDA Toolkit	affected All versions up to and including CUDA Toolkit 12.6U1

CWE

CWE-416

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5577

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.