NVIDIA (CUDA Toolkit) Products April 2024 Security Update Advisory
Overview
NVIDIA(https://www.nvidia.com) has released a security update that addresses a vulnerability in products it has been made. users of affected products are advised to update to the latest version.
Affected Products
CUDA Toolkit versions prior to CUDA
CUDA Toolkit versions prior to nvJPEG2000
CUDA Toolkit prior to nvTIFF
Resolved Vulnerabilities
A vulnerability in the NVIDIA CUDA toolkit could cause a crash when reading a malformed elf file on all platforms (CVE-2024-0072, CVSS 3.3) [1]
A vulnerability in the NVIDIA CUDA toolkit could cause a crash when reading malformed elf files on all platforms. (CVE-2024-0076, CVSS 3.3) [1]
Vulnerability Patches
The following product-specific Vulnerability Patches were made available in the 04/03/2024 update. For more information on Vulnerability Patches, please refer to the “Security Updates” section of the product-specific Referenced Sites documentation.
CUDA Toolkit CUDA Toolkit v12.4U1
CUDA Toolkit nvJPEG2000 v0.7.x
CUDA Toolkit nvTIFF v0.3.0
Referenced Sites
[1] NVIDIA CUDA Toolkit – April 2024