PT-2024-2873 · Nvidia · Nvidia Chatrtx

Ozgun Kultekin · Published 2024-03-26 · Updated 2025-09-18 · CVE-2024-0083

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions NVIDIA ChatRTX for Windows versions 0.2 and earlier

Description The issue is related to a lack of protection for the web page structure in the user interface of NVIDIA ChatRTX for Windows, allowing for potential cross-site scripting errors. This could enable a remote attacker to execute arbitrary code, cause a denial of service, or disclose protected information.

Recommendations For versions 0.2 and earlier, update to a version that includes the urgent patches released by NVIDIA to fix the high-risk vulnerabilities. As a temporary workaround, consider restricting access to the user interface of NVIDIA ChatRTX for Windows to minimize the risk of exploitation. Avoid using the application until the issue is resolved with the patches.

Fix

DoS

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2024-03037

CVE-2024-0083

Affected Products

Nvidia Chatrtx

References · 11

• https://bdu.fstec.ru/vul/2024-03037 · Security Note
• https://osv.dev/vulnerability/CVE-2024-0083 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0083 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5532 · Vendor Advisory
• https://twitter.com/fletch_ai/status/1773200099335631300 · Twitter Post
• https://t.me/cvenotify/76090 · Telegram Post
• https://t.me/cveNotify/135849 · Telegram Post
• https://twitter.com/iSecurity/status/1773282681759096992 · Twitter Post
• https://twitter.com/CVEnew/status/1777460663264387574 · Twitter Post
• https://twitter.com/XynikIT/status/1773065707409858711 · Twitter Post
• https://t.me/cveNotify/133580 · Telegram Post