CVE-2024-0145: NVIDIA NVJPEG2000

Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days.

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering.

Affected products

• NVIDIA NVJPEG2000: version 0.8.0 only

Published 2025-02-12. Last modified 2026-06-17.