NVIDIA Product Security Update Advisory (CVE-2024-0110)
Overview
An update has been released to address vulnerabilities in NVIDIA Products. Users of the affected versions are advised to update to the latest version.
Affected Products
CVE-2024-0110
- NVIDIA CUDA Toolkit versions: ~ 12.6 (inclusive) (Windows, Linux)
Resolved Vulnerabilities
Vulnerability in the ‘cuobjdump’ command in NVIDIA CUDA Toolkit where passing an invalid ELF file could result in out-of-bounds writes (CVE-2024-0110)
Vulnerability Patches
The following product-specific Vulnerability Patches have been made available in the latest update. If you are using an affected version, Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
CVE-2024-0110
- NVIDIA CUDA Toolkit version: 12.6U1 (Windows, Linux)
References
[1] Security Bulletin: NVIDIA CUDA Toolkit – August 2024