Cuda Toolkit vulnerabilities
8 known vulnerabilities in Cuda Toolkit from NVIDIA. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
CUDA Toolkit: Improper Neutralization of Special Elements used in an OS Command
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation
- 7.3 High severity
CUDA Toolkit: Uncontrolled Search Path Element
NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the NVIDIA Nsight Visual Studio Edition Monitor application. A successful exploit of this vulnerability
- 7.3 High severity
CUDA Toolkit: Improper Neutralization of Special Elements used in an OS Command
NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the process_nsys_rep_cli.py script if the script is invoked manually. A successful exploit of thi
- 7.8 High severity
NVIDIA CUDA Toolkit: Stack-based Buffer Overflow
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary
- 7.8 High severity
NVIDIA CUDA Toolkit: Heap-based Buffer Overflow
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the user to run nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary co
- 7.1 High severity
NVIDIA CUDA Toolkit: Out-of-bounds Write
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by providing certain image dimensions. A successful exploit of this vulnerability may lead to denial of service and in
- 7.8 High severity
NVIDIA CUDA Toolkit: Improper Handling of Length Parameter Inconsistency
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exp
- 7.8 High severity
CUDA Toolkit: Out-of-bounds Write
NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service.