The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2…
Priority LOW 11CWE-200Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-200.
Summary
The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer drivers for Linux 260.19.26, and possibly other versions, do not initialize pinned memory, which allows local users to read potentially sensitive memory, such as file fragments during read or write operations.
Why it matters now
EPSS 0.00379 32nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2011-0636
- 2026-10-03 Alias added: GHSA-jh56-j7wq-5q62
References
Other 6
- http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm
- http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm
- 70420
- http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm
- http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm
- http://forums.nvidia.com/index.php?showtopic=190303
More NVIDIA Cuda Toolkit vulnerabilities
- TI-2022-06192 Integer overflow in NVIDIA CUDA Toolkit CVSS 3.1HIGH 7.8
- TI-2025-24165 OS command injection in NVIDIA CUDA Toolkit CVSS 3.1HIGH 7.3
- TI-2025-24163 OS command injection in NVIDIA CUDA Toolkit CVSS 3.1HIGH 7.3
- TI-2025-17115 Stack-based buffer overflow in NVIDIA CUDA Toolkit CVSS 3.1HIGH 7.8
- TI-2025-17084 Heap-based buffer overflow in NVIDIA CUDA Toolkit CVSS 3.1HIGH 7.8
- TI-2025-17023 NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary… CVSS 3.1HIGH 7.8
Sources
- CVE-2011-0636 · CVE Program
- CVE-2011-0636 · NVD
- FIRST EPSS
- GHSA-jh56-j7wq-5q62 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences