NVIDIA CUDA Toolkit cuobjdump Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the NVIDIA CUDA Toolkit cuobjdump binary, available for both Linux and Windows. The issue arises when a user passes a malformed ELF file to cuobjdump, potentially causing a crash. This vulnerability affects all versions of the CUDA Toolkit prior to 12.8.

Impact

Exploitation of this vulnerability can lead to a partial denial-of-service condition, causing the application to crash or become unresponsive.

Remediation

Users can upgrade to NVIDIA CUDA Toolkit 12.8 to address this vulnerability. The update is available on the CUDA Toolkit Downloads page.