CVE-2024-53871: Low severity Nvidia CUDA Toolkit vulnerability
Published Feb 25, 2025
·Updated
NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability might lead to a partial denial of service.
Affected Software
5 affected components
Nvidia CUDA Toolkit
Nvidia CUDA Toolkit<12.8.0
debian/nvidia-cuda-toolkit*
debian/nvidia-cuda-toolkit*
debian/nvidia-cuda-toolkit<=11.8.0-5~deb12u1, <=12.4.1-2, <=12.4.1-8.2
Event History
Feb 25, 2025
CVE Published
via MITRE·08:28 PM
Data Sourced
via MITRE·08:28 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·09:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-53871?
CVE-2024-53871 has been rated as a moderate severity vulnerability.
2
How do I fix CVE-2024-53871?
To fix CVE-2024-53871, ensure you are using the latest version of the NVIDIA CUDA Toolkit that includes the security patch.
3
What type of vulnerability is CVE-2024-53871?
CVE-2024-53871 is an out-of-bounds read vulnerability found in the nvdisasm binary.
4
What could be the impact of exploiting CVE-2024-53871?
Exploiting CVE-2024-53871 could lead to a partial denial of service.
5
Which software is affected by CVE-2024-53871?
CVE-2024-53871 affects the NVIDIA CUDA Toolkit across all platforms.