CVE-2024-53876 Details
Description
NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability might lead to a partial denial of service.
A vulnerability allowing an out-of-bounds read has been identified in the NVIDIA CUDA Toolkit's nvdisasm binary, affecting all platforms. This issue arises when a user passes a malformed ELF file to nvdisasm. Exploiting this vulnerability could lead to a partial denial-of-service condition.
Users are advised to upgrade to NVIDIA CUDA Toolkit 12.8. Instructions for downloading the updated version are available on the CUDA Toolkit Downloads page.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 25, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://nvidia.custhelp.com/app/answers/detail/a_id/5594 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| nvidia cuda toolkit | < 12.8.0 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Sep 18, 2025 | Initial Analysis | [email protected] |
| Feb 25, 2025 | New CVE Received | [email protected] |