5.7

CVE-2025-23272

NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorNVIDIA
≫
Product NVIDIA CUDA Toolkit
Default Statusunaffected
Version All versions prior to CUDA Toolkit 12.9 Update 1
Status affected
VendorNVIDIA
≫
Product nvJPEG
Default Statusunaffected
Version All versions prior to nvJPEG 25.03
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.022
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
psirt@nvidia.com 5.7 1.4 4.2
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.