Out-of-Bounds Read Vulnerability in NVIDIA nvJPEG
CVE-2025-23274

4.5MEDIUM

Key Information:

Vendor

Nvidia
Status
Nvidia Cuda Toolkit
Nvjpeg
Vendor
CVE Published:
24 September 2025

What is CVE-2025-23274?

NVIDIA nvJPEG contains a vulnerability in jpeg encoding that allows an attacker to trigger an out-of-bounds read through specially crafted input images. This occurs due to integer overflow issues during array index calculations. Successfully exploiting this vulnerability can lead to service disruptions, impacting application functionality and user experience.

Affected Version(s)

NVIDIA CUDA Toolkit Windows All versions prior to CUDA Toolkit 13.0

nvJPEG Linux x86_64 All versions prior to nvJPEG 13.0.0

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23274
https://www.cve.org/CVERecord?id=CVE-2025-23274
https://nvidia.custhelp.com/app/answers/detail/a_id/5661

CVSS V3.1

Score:
4.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-23274 : Out-of-Bounds Read Vulnerability in NVIDIA nvJPEG