Out-of-Bounds Read Vulnerability in NVIDIA CUDA Toolkit SDK

CVE-2023-0193

What is CVE-2023-0193?

The NVIDIA CUDA Toolkit SDK features a vulnerability within the cuobjdump tool that allows a local user to execute the tool against a malicious binary. This exploitation could trigger an out-of-bounds read, leading to a limited denial of service and the potential for limited information disclosure, posing risks for system security. It is essential for users of the CUDA Toolkit SDK to be aware of this vulnerability and adopt appropriate measures to mitigate associated risks.

References