Improper input validation in Nvidia Nvtiff Library
CVE-2024-0080
NVIDIA nvTIFF Library for Windows and Linux contains a vulnerability where improper input validation might enable an attacker to use a specially crafted input file. A successful exploit of this vulnerability might lead to a partial denial of service.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.002 (9.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.8 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L.
Affected products
- Nvidia Nvtiff Library — versions All versions prior to nvTIFF v0.3.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-0080?
- CVE-2024-0080 is a low-severity vulnerability in Nvidia Nvtiff Library, classified under Improper Input Validation. CVSS score: 2.8/10. Published 2024-04-05.
- How severe is CVE-2024-0080?
- Low severity. CVSS v3 base score is 2.8 out of 10.