CoreCVE
Back

MEDIUM

NVIDIA RAPIDS contains a vulnerability in cuDF and cuML, where a user could cause a deserialization of untrusted data issue

Published Jan 28, 2025

Description

NVIDIA RAPIDS contains a vulnerability in cuDF and cuML, where a user could cause a deserialization of untrusted data issue. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner nvidia
Published Jan 28, 2025
Updated Jan 28, 2025
Reserved Dec 2, 2023
Link CVE-2024-0140
CISA Vulnrichment
Updated Jan 28, 2025
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2024-0140
Red Hat
Severity n/a
Public date n/a
Links CVE-2024-0140
ENISA EUVD
Assigner nvidia
Published Jan 28, 2025
Updated Jan 28, 2025
Exploited since n/a
Link EUVD-2024-15939
EUVD-2024-15939