CVE-2025-23274: NVIDIA Cuda Toolkit

Medium severity, CVSS 4.5. EPSS: 0.1% chance of exploitation in the next 30 days.

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service.

Affected products

• NVIDIA NVIDIA Cuda Toolkit
• NVIDIA Nvjpeg

Published 2025-09-24. Last modified 2026-06-17.