CVE-2024-0123

Published: Oct 3, 2024Modified: Jun 17, 2026

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Exploitability: 1.8 / Impact: 1.4

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool where an attacker may cause an improper validation in input issue by tricking the user into running nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to denial of service.

Affected (1)

Products: Nvidia: Cuda Toolkit

1 product

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Nvidia Cuda Toolkit	Up to 12.6.2

Running on/with	Platform Versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

Improper Validation of Specified Index, Position, or Offset in Input

The product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties.

References (1)

https://nvidia.custhelp.com/app/answers/detail/a_id/5577

Source: psirt@nvidia.com

Vendor Advisory

Timeline

No history available yet.