NVIDIA (ChatRTX) Products May 2024 Security Update Advisory

Overview

 

An update has been released to address vulnerabilities in NVIDIA products. Users of affected versions are advised to update to the latest version.

 

Affected Products

 

ChatRTX 0.2.1 or below (Windows)

 

Resolved Vulnerabilities

 

Vulnerability in NVIDIA ChatRTX for Windows allows a user to send user input to alter execution flow, resulting in improper privilege management issues (CVE-2024-0096)

Vulnerability in NVIDIA ChatRTX for Windows that could allow a user to exploit communication between different processes to cause improper privilege management issues (CVE-2024-0097)

Vulnerability in NVIDIA ChatRTX for Windows that could allow a user to send sensitive information in clear text via data sniffing(CVE-2024-0098)

 

Vulnerability Patches

 

Vulnerability patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

NVIDIA ChatRTX version 0.3

 

Referenced Sites

 

[1] Security Bulletin: NVIDIA ChatRTX – May 2024

https://nvidia.custhelp.com/app/answers/detail/a_id/5533