NVIDIA Nvjpeg vulnerabilities

4 CVEs affecting NVIDIA Nvjpeg, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-23275, published 2025-09-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-23272, published 2025-09-24. Medium severity, CVSS 5.7. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to…
CVE-2025-23275, published 2025-09-24. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by providing certain image dimensions. A successful…
CVE-2025-23274, published 2025-09-24. Medium severity, CVSS 4.5. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in…
CVE-2025-23273, published 2025-09-24. Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a divide by zero error by submitting a specially crafted JPEG file. A successful…