Multiple Vulnerabilities Discovered in NVIDIA CUDA Toolkit
Summary: Unit 42 found nine vulnerabilities in two NVIDIA CUDA Toolkit utilities, cuobjdump and nvdisasm, after running a file fuzzer on both applications for a month; six were in cuobjdump and three in nvdisasm. The flaws, tracked as CVE-2024-53871 through CVE-2024-53878, carry CVSS scores from 2.8 to 3.3 and were addressed by an NVIDIA update released February 18, 2025.
Bottom line: Exploitation requires a developer to run these tools against a maliciously manipulated cubin file, and the source states CUDA is widely used in security-sensitive generative AI, machine learning and scientific computing - so the exposure sits in the developer environments building those workloads, not in production GPUs.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026