NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-031 advisory.

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53870)

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53871)

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53872)

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53874)

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53875)

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53876)

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could     cause a NULL pointer exception by passing a malformed ELF file to nvdisasm. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53877)

    NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user     could cause a crash by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53878)

    NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user     could cause a crash by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53879)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-013 advisory.

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53870)

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53871)

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53872)

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53874)

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53875)

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53876)

    NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could     cause a NULL pointer exception by passing a malformed ELF file to nvdisasm. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53877)

    NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user     could cause a crash by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53878)

    NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user     could cause a crash by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53879)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53874)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of NVIDIA CUDA Toolkit installed on the remote host is prior to 12.8.0. It is, therefore, affected by multiple vulnerabilities as referenced in the February_2025 advisory.

  - NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53870, CVE-2024-53872, CVE-2024-53874,     CVE-2024-53875)

  - CVE202453870  NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary,     where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful     exploit of this vulnerability might lead to a partial denial of service. (CVE-2024-53870)

  - NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53871, CVE-2024-53876)

  - NVIDIA CUDA toolkit for Windows contains a vulnerability in the cuobjdump binary, where a user could cause     an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53873)

  - NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could     cause a NULL pointer exception by passing a malformed ELF file to nvdisasm. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53877)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
314575	Amazon Linux 2023 : cuda-toolkit (ALAS2023NVIDIA-2025-031)	Nessus	Amazon Linux Local Security Checks	low
314567	Amazon Linux 2023 : cuda (ALAS2023NVIDIA-2025-013)	Nessus	Amazon Linux Local Security Checks	low
247920	Linux Distros Unpatched Vulnerability : CVE-2024-53874	Nessus	Misc.	low
216913	NVIDIA CUDA Toolkit 12.8.0 Multiple Vulnerabilities (February_2025)	Nessus	Misc.	low

Detections

Analytics

CVE-2024-53874

low

Tenable Plugins

low

low

low

low