CVE-2024-53878

Published: Feb 25, 2025Modified: Jun 17, 2026

2.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Exploitability: 1.3 / Impact: 1.4

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a crash by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service.

Affected (1)

Products: Nvidia: Cuda Toolkit

1 product

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Nvidia Cuda Toolkit	Before 12.8.0

Running on/with	Platform Versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

References (1)

https://nvidia.custhelp.com/app/answers/detail/a_id/5594

Source: psirt@nvidia.com

Vendor Advisory

Timeline

No history available yet.