Divide-by-Zero Vulnerability in NVIDIA nvJPEG Software
CVE-2026-65160

5.5MEDIUM

Key Information:

Vendor

Nvidia
Status
Cuda Toolkit
Nvjpeg
Vendor
CVE Published:
3 November 2026

What is CVE-2026-65160?

NVIDIA nvJPEG has a vulnerability that allows an attacker to exploit a divide-by-zero condition, potentially leading to a denial of service. This weakness can be exploited through specially crafted inputs, causing the software to crash or become unresponsive. Users of nvJPEG are advised to apply security patches available from NVIDIA to mitigate the risk associated with this vulnerability.

Affected Version(s)

CUDA Toolkit All 0 to 13.4.1

NVJPEG Linux x86_64, Linux sbsa Jetson, Windows, Linux for Tegra, DriveOS 0 to 26.06

References

https://nvd.nist.gov/vuln/detail/CVE-2026-65160
https://www.cve.org/CVERecord?id=CVE-2026-65160
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.