CVE-2025-23272

MediumCVSS 5.7

Published: 24/09/2025(UTC)Updated: 26/09/2026(UTC)Translated: 26/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit might lead to information disclosure or denial of service.

Risk Assessment

An attacker can access sensitive data or cause a service crash, affecting confidentiality and availability.

Recommendation

Update the NVIDIA nvJPEG library to the latest patched version.

Other vulnerabilities in NVIDIA nvJPEG

CVE-2026-65160Medium
NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero. A successful exploit might lead to denial of service.

Original NVD description (English source)

NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS