CVE-2024-0111

Published: Aug 31, 2024Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Exploitability: 1.8 / Impact: 2.5

Source: NVD

Description

NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed ELF file. A successful exploit of this vulnerability may lead to a limited denial of service or data tampering.

Affected (1)

Products: Nvidia: Cuda Toolkit

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nvidia Cuda Toolkit	Up to 12.6.0

Related CWEs

Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

References (1)

https://nvidia.custhelp.com/app/answers/detail/a_id/5564

Source: psirt@nvidia.com

Vendor Advisory

Timeline

No history available yet.