NVIDIA CUDA Toolkit Heap-Based Buffer Overflow Vulnerability in nvdisasm Allowing Arbitrary Code Execution

A heap-based buffer overflow vulnerability has been identified in the NVIDIA CUDA Toolkit's nvdisasm component, present in all versions prior to 13.0. This vulnerability allows an attacker to execute arbitrary code at the privilege level of the user running nvdisasm, by manipulating the user into processing a malicious ELF file with the tool.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution, with the executed code running at the same privilege level as the user who initiated nvdisasm.

Remediation

Users are advised to upgrade to NVIDIA CUDA Toolkit 13.0 or later.