Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.3

CVE-2024-53873: NVIDIA CUDA Toolkit for Windows: Malformed File Can Crash Program

CVE-2024-53873 · published 1 year ago
Summary

A bug in the NVIDIA CUDA Toolkit for Windows could cause a program to crash if it's given a specially crafted file. This might disrupt normal operations, but it's unlikely to allow hackers to access sensitive information or take control of your system. You should update the NVIDIA CUDA Toolkit to the latest version to fix the issue.

What to do
  • Update nvidia cuda_toolkit to version 12.8.0 or later.
Affected software
VendorProductAffected versions
nvidia cuda_toolkit < 12.8.0
cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*
Original advisory text
NVIDIA CUDA toolkit for Windows contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit o...
NVIDIA CUDA toolkit for Windows contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
3.3 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published25 Feb 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
Track software like this
Free during beta