NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/NVIDIA/nvidia-container-toolkit(Go) | 0 | 1.16.2 | N/A |
CVSS Metrics
