How severe is CVE-2024-0132?

This vulnerability has a severity rating of HIGH with a CVSS score of 8.3 out of 10.

What type of vulnerability is CVE-2024-0132?

This is classified as CWE-367, which is a common weakness in software security.

CVE-2024-0132 - HIGH Severity | CVSS 8.3

Vulnerability Description

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Related Vulnerabilities

CVE-2025-23359

HIGH

CVSS:8.3(High)

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file ...

CWE-3672025

CVE-2024-43882

HIGH

CVSS:8.4(High)

In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via do_filp_open(), permission checking is do...

CWE-3672024

CVE-2020-8873

HIGH

CVSS:8.2(High)

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute high-privileged code ...

CWE-3672020

CVE-2024-3290

HIGH

CVSS:8.2(High)

A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus host could modify installation parameters at installation time, which could lead to the execution of ar...

CWE-3672024

CVE-2024-3292

HIGH

CVSS:8.2(High)

A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus Agent host could modify installation parameters at installation time, which could lead to the execution...

CWE-3672024

CVE-2025-22224

HIGH

CVSS:8.2(High)

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machin...

CWE-3672025