4.5Media

CVE-2025-23274

NVIDIA NVIDIA CUDA Toolkit; NVIDIA nvJPEG Publicada: (hace 1 año)

Descripción

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service.

Debilidad (CWE): CWE-125

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
NVIDIA NVIDIA CUDA Toolkit All versions prior to CUDA Toolkit 13.0
NVIDIA nvJPEG All versions prior to nvJPEG 13.0.0

Referencias y parches