CVE-2024-0105

HighCVSS 8.9/10Last modified Jun 17, 2026

Description

NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.

Metrics

CVSS 3.1 8.9/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

Weakness enumeration

CWE-274

Affected software

VendorProductVersions
NVIDIAConnectX4All versions prior to 12.28.2302
NVIDIAConnectX4 LXAll versions prior to xx.32.1900
NVIDIAConnectX GAAll versions prior to xx.41.1000
NVIDIAConnectX LTS22All versions prior to xx.35.4030
NVIDIAConnectX LTS23All versions prior to xx.39.3560
NVIDIABlueField 1All versions prior to 18.31.1014
NVIDIABlueField GAAll versions prior to xx.41.1000
NVIDIABlueField LTS22All versions prior to xx.35.4030
NVIDIABlueField LTS23All versions prior to xx.39.3560

References

Timeline

Published
Nov 1, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-01068.7NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper CVE-2024-01077.8NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-oCVE-2024-01088.8NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping aCVE-2024-01093.3NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file. A sucCVE-2024-01107.8NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ECVE-2024-01114.4NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a CVE-2024-01127.5NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker can cause an improper input validation issue CVE-2024-01138.8NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traverCVE-2024-01148.1NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administraCVE-2024-01156.1NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled reCVE-2024-01166.5NVIDIA Triton Inference Server contains a vulnerability where a user may cause an out-of-bounds read issue by releasing a shared memory regiCVE-2024-01177.8NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-o
CVE-2024-0105: High severity, CVSS 8.9 | Vulnix