CVE-2024-0111CWE-1284

NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed ELF file

Medium · published August 31, 2024

CVSS v3.1
4.4
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed ELF file. A successful exploit of this vulnerability may lead to a limited denial of service or data tampering.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Weakness
CWE-1284 · Improper Validation of Specified Quantity in Input
Published
2024-08-31T08:30Z
EPSS history
Timeline
  • 31 AUG 08:30Z
    NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed ELF file
    cvelistv5