CVE-2022-34667

Severity: medium (CVSS 4.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-19 · updated 2026-06-17
Weakness: CWE-121

Description

NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer overflow condition by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally, which may lead to a limited denial of service and some loss of data integrity for the local user.

Affected products

NVIDIA CUDA Toolkit: before 11.8 — fixed in 11.8

How to fix

Upgrade to a fixed version: NVIDIA CUDA Toolkit 11.8. Check the vendor advisory for mitigations.

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5373
https://nvidia.custhelp.com/app/answers/detail/a_id/5373

Get alerted when CVE-2022-34667 or the next vulnerability affects your stack