BaseFortify

Publication date: 2025-09-24

Last updated on: 2026-09-26

Assigner: NVIDIA Corporation

Description

NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-09-24

Last Modified

2026-09-26

Generated

2026-10-23

AI Q&A

2025-09-24

EPSS Evaluated

2026-10-20

NVD

CVE-2025-23272

EUVD

EUVD-2025-30976

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	nvjpeg	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the NVIDIA nvJPEG library, where an attacker can cause an out-of-bounds read by using a specially crafted JPEG file. This means the attacker can make the software read memory outside the intended boundaries.

Impact Analysis

Exploiting this vulnerability might lead to information disclosure, where sensitive data could be exposed, or denial of service, causing the affected system or application to crash or become unavailable.

Hi! I’m here to help you understand CVE-2025-23272. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70