Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2025-23275

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by providing certain image dimensions.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by providing certain image dimensions. A successful exploit of this vulnerability may lead to denial of service and information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA NVIDIA CUDA Toolkit

Default version status: unaffected

  • All versions prior to CUDA Toolkit 13.0affected

NVIDIA nvJPEG

Default version status: unaffected

  • All versions prior to nvJPEG 13.0.0affected

References