CVE-2022-21821CWE-1285

NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to…

High · published March 29, 2022

CVSS v3.1
7.8
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code execution that causes complete denial of service and an impact on data confidentiality and integrity.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02089 · 81.5th percentile
Weakness
CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input
Published
2022-03-29T20:05Z
EPSS history
Timeline
  • 29 MAR 20:05Z
    NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to…
    cvelistv5