Home » Database

AVID-2026-R1348

Description

Vulnerability CVE-2024-0115

Details

NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long running CV-CUDA Python process. A successful exploit of this vulnerability may lead to denial of service and data loss.

Reason for inclusion in AVID: CVE-2024-0115 describes a vulnerability in NVIDIA CV-CUDA Python APIs that can cause uncontrolled resource consumption, leading to denial of service and potential data loss. This is a software component used in AI workflows (CV-CUDA) and is part of the AI software stack, making it relevant to AI systems and their supply chains. The issue affects a software dependency/runtimes used to build/deploy AI capabilities, which aligns with software supply-chain concerns rather than hardware/firmware-only problems. The CVE entry provides explicit vulnerability behavior and impact signals, meeting criteria for AVID curation.

References

Affected or Relevant Artifacts

  • Developer: NVIDIA
  • Deployer: NVIDIA
  • Artifact Details:
TypeName
SystemNVIDIA CV-CUDA

Impact

AVID Taxonomy Categorization

  • Risk domains: Security
  • SEP subcategories: S0100: Software Vulnerability
  • Lifecycle stages: L06: Deployment

CVSS

Version3.1
Vector StringCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Base Score6.1
Base Severity🟠 Medium
Attack VectorLOCAL
Attack Complexity🟢 Low
Privileges Required🟢 Low
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity Impact🟢 Low
Availability Impact🔴 High

CWE

IDDescription
CWE-400CWE-400 Uncontrolled Resource Consumption

Other information

  • Report Type: Advisory
  • Credits:
  • Date Reported: 2024-08-09
  • Version: 0.3.3
  • AVID Entry