Out-of-Bounds Write Vulnerability in NVIDIA CUDA Toolkit
CVE-2025-23275

4.2MEDIUM

Key Information:

Vendor

Nvidia
Status
Nvidia Cuda Toolkit
Nvjpeg
Vendor
CVE Published:
24 September 2025

What is CVE-2025-23275?

The NVIDIA CUDA Toolkit has a vulnerability in the nvJPEG component where a local authenticated user can trigger an out-of-bounds write by supplying specially crafted image dimensions. This flaw can result in a denial of service or potentially lead to unauthorized information disclosure, posing a significant risk to system integrity and data security.

Affected Version(s)

NVIDIA CUDA Toolkit Windows All versions prior to CUDA Toolkit 13.0

nvJPEG Linux x86_64 All versions prior to nvJPEG 13.0.0

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23275
https://www.cve.org/CVERecord?id=CVE-2025-23275
https://nvidia.custhelp.com/app/answers/detail/a_id/5661

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-23275 : Out-of-Bounds Write Vulnerability in NVIDIA CUDA Toolkit