CVE-2024-0133

LowCVSS 3.4/10Last modified Jun 17, 2026

Description

NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering.

Metrics

CVSS 3.1 3.4/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N

Weakness enumeration

CWE-367

Affected software

VendorProductVersions
NVIDIAContainer ToolkitAll versions up to and including v1.16.1
NVIDIAGPU OperatorAll versions up to and including 24.6.1

References

Timeline

Published
Sep 26, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-01344.1NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead tCVE-2024-01357.6NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification oCVE-2024-01368.4NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted codeCVE-2024-01376.5NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted codeCVE-2024-01389.8NVIDIA Base Command Manager contains a missing authentication vulnerability in the CMDaemon component. A successful exploit of this vulnerabCVE-2024-01394.4NVIDIA Base Command Manager and Bright Cluster Manager for Linux contain an insecure temporary file vulnerability. A successful exploit of tCVE-2024-01406.8NVIDIA RAPIDS contains a vulnerability in cuDF and cuML, where a user could cause a deserialization of untrusted data issue. A successful exCVE-2024-01416.8NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the GPU vBIOS that may allow a malicious actor with tenant level GPU access to writeCVE-2024-01426.8NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted CVE-2024-01436.8NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted CVE-2024-01446.8NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a buffer overflow issue by means of a specially crafted JPEG2CVE-2024-01456.8NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially cr
CVE-2024-0133: Low severity, CVSS 3.4 | Vulnix