CVE-2025-23272: NVIDIA Cuda Toolkit

Medium severity, CVSS 5.7. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.

Affected products

• NVIDIA NVIDIA Cuda Toolkit
• NVIDIA Nvjpeg

Published 2025-09-24. Last modified 2026-09-26.