CVE-2024-0080
LOWNVIDIA nvTIFF Library < 0.3.0 - Partial Denial of Service via Crafted Input File
Title source: llmDescription
NVIDIA nvTIFF Library for Windows and Linux contains a vulnerability where improper input validation might enable an attacker to use a specially crafted input file. A successful exploit of this vulnerability might lead to a partial denial of service.
References (1)
Core 1
Core References
Vendor Advisory
https://https://nvidia.custhelp.com/app/answers/detail/a_id/5517
Scores
CVSS v3
2.8
EPSS
0.0002
EPSS Percentile
7.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-20
Status
published
Products (1)
NVIDIA/nvTIFF Library
All versions prior to nvTIFF v0.3.0
Published
Apr 05, 2024
Tracked Since
Feb 18, 2026