NVIDIA Cuda Toolkit vulnerabilities

2 CVEs affecting NVIDIA Cuda Toolkit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-23274, published 2025-09-24.

More from NVIDIA.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-23272, published 2025-09-24. Medium severity, CVSS 5.7. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to…
• CVE-2025-23274, published 2025-09-24. Medium severity, CVSS 4.5. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in…