NVIDIA RAPIDS cuDF and cuML Deserialization Vulnerability Leading to Code Execution and Information Disclosure

A vulnerability exists in NVIDIA RAPIDS cuDF and cuML due to improper handling of deserialization of untrusted data. This issue could be exploited to execute arbitrary code, manipulate data, cause a denial of service, and disclose sensitive information. The vulnerability affects all versions prior to 24.12.00.

Impact

Exploitation of this vulnerability could result in arbitrary code execution, unauthorized data modification, service disruption, and exposure of confidential information.

Remediation

Users are advised to update to NVIDIA RAPIDS AI version 24.12.00 or later.