CVE-2022-34667
MEDIUMNVIDIA CUDA Toolkit < 11.8 - Stack-based Buffer Overflow in cuobjdump via Crafted File
Title source: llmDescription
NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer overflow condition by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally, which may lead to a limited denial of service and some loss of data integrity for the local user.
References (1)
Core 1
Core References
Patch, Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5373
Scores
CVSS v3
4.4
EPSS
0.0029
EPSS Percentile
52.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-121
CWE-787
Status
published
Products (1)
nvidia/cuda_toolkit
< 11.8
Published
Nov 19, 2022
Tracked Since
Feb 18, 2026