NVIDIA CUDA Toolkit cuobjdump Out-of-Bounds Read Vulnerability Allowing Partial Denial-of-Service

A vulnerability has been identified in the NVIDIA CUDA Toolkit cuobjdump binary, present on all platforms. This vulnerability allows a user to cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. Exploiting this vulnerability could lead to a partial denial-of-service.

Impact

Exploitation of this vulnerability causes an out-of-bounds read, which can lead to memory corruption or information disclosure, followed by a crash of the application, creating a partial denial-of-service condition.

Remediation

Users are advised to upgrade to NVIDIA CUDA Toolkit 12.8. Instructions for downloading the latest version can be found on the NVIDIA CUDA Toolkit Downloads page.