Out-of-Bounds Read Vulnerability in NVIDIA CUDA Toolkit for Windows

CVE-2024-53873

Summary

A vulnerability exists in the NVIDIA CUDA toolkit for Windows, specifically in the cuobjdump binary. This flaw enables an attacker to trigger an out-of-bounds read by supplying a malformed ELF file to the cuobjdump utility. The implications of exploiting this vulnerability may include a partial denial of service, impacting the availability of associated services and functionalities. Organizations utilizing the CUDA Toolkit should take immediate steps to evaluate their security posture and implement necessary updates to safeguard against potential exploitation.

References