Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2025-23272

NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerabili

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA NVIDIA CUDA Toolkit

Default version status: unaffected

  • All versions prior to CUDA Toolkit 12.9 Update 1affected

NVIDIA nvJPEG

Default version status: unaffected

  • All versions prior to nvJPEG 25.03affected

References