PT-2025-1569 · Nvidia · Cuml+2

Cyfra07 · Published 2025-01-22 · Updated 2025-01-28 · CVE-2024-0140

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA RAPIDS (affected versions not specified)

Description The issue is related to a deserialization of untrusted data in cuDF and cuML, which could lead to code execution, data tampering, denial of service, and information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2025-12850

CVE-2024-0140

Affected Products

Nvidia Rapids

Cudf

Cuml

References · 6

• https://bdu.fstec.ru/vul/2025-12850 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-0140 · Security Note
• https://t.me/cvedetector/16576 · Telegram Post
• https://twitter.com/CVEnew/status/1884183323276370300 · Twitter Post
• https://nvidia.custhelp.com/app/answers/detail/a_id/5597 · Note
• https://t.me/cvenotify/108831 · Telegram Post