5.7Orta
CVE-2025-23272
Açıklama
NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.
Zayıflık türü (CWE):
CWE-125
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| NVIDIA | NVIDIA CUDA Toolkit | All versions prior to CUDA Toolkit 12.9 Update 1 | |
| NVIDIA | nvJPEG | All versions prior to nvJPEG 25.03 |