Description
NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.
Problem types
Product status
All versions prior to CUDA Toolkit 12.9 Update 1
All versions prior to nvJPEG 25.03
References
nvd.nist.gov/vuln/detail/CVE-2025-23272
www.cve.org/CVERecord?id=CVE-2025-23272
nvidia.custhelp.com/app/answers/detail/a_id/5661
