CVE-2022-21821
NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this...
NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code execution that causes complete denial of service and an impact on data confidentiality and integrity.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code execution that causes complete denial of service and an impact on data confidentiality and integrity.
- Record
CVE-2022-21821- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-1285
- Updated
- 2026-11-02
EUVDEUVD-2022-26981
NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code execution that causes complete denial of service and an impact on data confidentiality and integrity.
- Record
EUVD-2022-26981- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gj57-j72r-r89g
NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this...
NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code execution that causes complete denial of service and an impact on data confidentiality and integrity.
- Record
GHSA-gj57-j72r-r89g- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
NVD
NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code execution that causes complete denial of service and an impact on data confidentiality and integrity.
- Record
CVE-2022-21821- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-1285, CWE-190
- Updated
- 2026-11-02
OSV
NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code execution that causes complete denial of service and an impact on data confidentiality and integrity.
- Record
CVE-2022-21821- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-21821
NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code execution that causes complete denial of service and an impact on data confidentiality and integrity.
- Record
DEBIAN-CVE-2022-21821- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVUBUNTU-CVE-2022-21821
NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code execution that causes complete denial of service and an impact on data confidentiality and integrity.
- Record
UBUNTU-CVE-2022-21821- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nvidia-cuda-toolkitDebian:12 |
before 11.6.2-2, plus listed versions 10.0.130-110.0.130-210.0.130-310.1.105-110.1.105-2 Show 45 moreShow less10.1.105-310.1.168-110.1.168-1010.1.168-1110.1.168-210.1.168-310.1.168-410.1.168-510.1.168-610.1.168-710.1.168-7~bpo10+110.1.168-810.1.168-910.1.243-110.1.243-210.1.243-310.1.243-410.1.243-510.1.243-610.1.243-6~bpo10+110.1.243-710.1.243-810.2.89-110.2.89-210.2.89-310.2.89-410.2.89-510.2.89-5~bpo10+111.0.2-111.0.3-111.0.3-211.0.3-311.1.0-111.1.1-111.1.1-211.1.1-311.1.1-3~bpo10+111.1.1-411.2.0-111.2.0-211.2.0-2~bpo10+111.2.1-111.2.1-211.2.1-2~bpo10+111.2.2-1 |
11.6.2-2 |
nvidia-cuda-toolkitDebian:13 |
before 11.6.2-2, plus listed versions 10.0.130-110.0.130-210.0.130-310.1.105-110.1.105-2 Show 45 moreShow less10.1.105-310.1.168-110.1.168-1010.1.168-1110.1.168-210.1.168-310.1.168-410.1.168-510.1.168-610.1.168-710.1.168-7~bpo10+110.1.168-810.1.168-910.1.243-110.1.243-210.1.243-310.1.243-410.1.243-510.1.243-610.1.243-6~bpo10+110.1.243-710.1.243-810.2.89-110.2.89-210.2.89-310.2.89-410.2.89-510.2.89-5~bpo10+111.0.2-111.0.3-111.0.3-211.0.3-311.1.0-111.1.1-111.1.1-211.1.1-311.1.1-3~bpo10+111.1.1-411.2.0-111.2.0-211.2.0-2~bpo10+111.2.1-111.2.1-211.2.1-2~bpo10+111.2.2-1 |
11.6.2-2 |
nvidia-cuda-toolkitUbuntu:16.04:LTS |
All versions, plus listed versions 6.5.14-26.5.19-27.0.28-17.0.28-27.0.28-2ubuntu17.5.18-0ubuntu1 |
None known |
nvidia-cuda-toolkitUbuntu:18.04:LTS |
All versions, plus listed versions 8.0.61-18.0.61-28.0.61-39.0.176-29.1.85-19.1.85-2ubuntu19.1.85-39.1.85-3ubuntu1 |
None known |
nvidia-cuda-toolkitUbuntu:20.04:LTS |
All versions, plus listed versions 10.1.168-1build110.1.168-210.1.168-310.1.243-1ubuntu210.1.243-1ubuntu310.1.243-210.1.243-3 |
None known |
nvidia-cuda-toolkitUbuntu:22.04:LTS |
All versions, plus listed versions 11.3.1-411.3.1-511.4.3-111.4.3-1build111.5.1-1build111.5.1-1ubuntu1 |
None known |
nvidia-cuda-toolkitUbuntu:24.04:LTS |
All versions, plus listed versions 12.0.1-212.0.1-312.0.1-412.0.1-4build112.0.1-4build312.0.1-4build4 |
None known |
nvidia-cuda-toolkitUbuntu:25.10 |
All versions, plus listed versions 12.2.2-2build112.3.2-112.4.1-212.4.1-412.4.1-4build1 |
None known |
nvidia-cuda-toolkitUbuntu:26.10 |
All versions, plus listed versions 12.4.1-812.4.1-8.112.4.1-8.212.4.1-8.2build112.4.1-8.2ubuntu112.4.1-8.2ubuntu2 |
None known |
nvidia-cuda-toolkitUbuntu:26.04:LTS |
All versions, plus listed versions 12.4.1-4build112.4.1-512.4.1-6build112.4.1-6build212.4.1-8 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-21821 is a high vulnerability (CVSS 7.8) in Nvidia Cuda Toolkit, published March 29, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.09%, the 81st percentile. Fixed in nvidia-cuda-toolkit 11.6.2-2.
References
Left out here: 216 versions. The JSON record has them.