CVE-2020-5991: High severity nvidia cuda toolkit vulnerability
Published Oct 30, 2020
·Updated
NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in the NVJPEG library in which an out-of-bounds read or write operation may lead to code execution, denial of service, or information disclosure.
Affected Software
2 affected components
Nvidia CUDA Toolkit<11.1.1
Microsoft Windows
Event History
Oct 30, 2020
CVE Published
via MITRE·08:40 PM
Data Sourced
via MITRE·08:40 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-5991?
CVE-2020-5991 is a vulnerability in the NVJPEG library in NVIDIA CUDA Toolkit, all versions prior to 11.1.1.
2
What are the potential impacts of CVE-2020-5991?
The potential impacts of CVE-2020-5991 include code execution, denial of service, or information disclosure.
3
Which versions of NVIDIA CUDA Toolkit are affected by CVE-2020-5991?
All versions of NVIDIA CUDA Toolkit prior to 11.1.1 are affected by CVE-2020-5991.
4
How severe is the vulnerability CVE-2020-5991?
CVE-2020-5991 has a severity rating of 7.8, which is considered high.
5
How can I fix CVE-2020-5991?
To fix CVE-2020-5991, update your NVIDIA CUDA Toolkit to version 11.1.1 or later.