4.5Media
CVE-2025-23274
Descripción
NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service.
Debilidad (CWE):
CWE-125
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| NVIDIA | NVIDIA CUDA Toolkit | All versions prior to CUDA Toolkit 13.0 | |
| NVIDIA | nvJPEG | All versions prior to nvJPEG 13.0.0 |