CVE-2025-23272
published 2025-09-24CVE-2025-23272: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful…
PriorityP424medium5.7CVSS 3.1
AVLACHPRNUINSUCLINAH
EPSS
0.14%
3.9th percentile
NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nvidia-cuda-toolkit | — | — |
| nvidia | nvidia_cuda_toolkit | — | — |
| nvidia | nvjpeg | — | — |
CVSS provenance
nvdv3.15.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
osv5.7MEDIUM
vendor_debian5.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2025-23272: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file
osv·2025-09-24·CVSS 5.7
CVE-2025-23272 [MEDIUM] CVE-2025-23272: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file
NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.
GHSA
GHSA-x8j2-6cf3-rj3q: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file
ghsa_unreviewed·2025-09-24
CVE-2025-23272 [MEDIUM] CWE-125 GHSA-x8j2-6cf3-rj3q: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file
NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.
Debian
CVE-2025-23272: nvidia-cuda-toolkit - NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an ou...
vendor_debian·2025·CVSS 5.7
CVE-2025-23272 [MEDIUM] CVE-2025-23272: nvidia-cuda-toolkit - NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an ou...
NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-09-24
Published