NVIDIA CUDA Toolkit cuobjdump Out-of-Bounds Read Vulnerability

A vulnerability has been identified in the NVIDIA CUDA Toolkit cuobjdump binary, where a user can cause an out-of-bounds read by supplying a malformed ELF file. This vulnerability is present in all versions of the CUDA Toolkit prior to 12.8, on both Windows and Linux platforms. Exploiting this issue could lead to a partial denial-of-service condition.

Impact

Exploitation of this vulnerability can cause a crash, leading to a partial denial-of-service condition.

Remediation

Users are advised to upgrade to NVIDIA CUDA Toolkit version 12.8. Instructions for downloading the updated version are available on the NVIDIA CUDA Toolkit Downloads page.