CVE-2026-24189

{
  "id": "CVE-2026-24189",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-21T17:16:23.933",
  "lastModified": "2026-10-26T00:10:00.150",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliciously crafted request. A successful exploit of this vulnerability might lead to denial of service and information disclosure."
    },
    {
      "lang": "es",
      "value": "NVIDIA CUDA-Q contiene una vulnerabilidad en un endpoint, donde un atacante no autenticado podría causar una lectura fuera de límites al enviar una solicitud maliciosamente diseñada. Un exploit exitoso de esta vulnerabilidad podría llevar a denegación de servicio y revelación de información."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "NVIDIA",
          "product": "CUDA-Q",
          "defaultStatus": "unaffected",
          "platforms": [
            "All"
          ],
          "versions": [
            {
              "version": "All versions prior to 0.14.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 4.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-21T16:39:51.494493Z",
          "id": "CVE-2026-24189",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24189",
      "source": "[email protected]"
    },
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5820",
      "source": "[email protected]"
    },
    {
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24189",
      "source": "[email protected]"
    }
  ]
}