CVE-2025-23275

NVIDIA CUDA Toolkit contains a concrete vulnerability in the nvJPEG component (CVE-2025-23275): a local authenticated user may cause a GPU out-of-bounds write by submitting images with certain dimensions, potentially leading to denial of service and information disclosure. This CVE is discussed i...

CVE-2025-23275

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by providing certain image dimensions. A successful exploit of this vulnerability may lead to denial of service and information disclosure...

CVE-2025-23274

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service...

CVE-2025-23274

The CVE-2025-23274 entry concerns NVIDIA nvJPEG in the CUDA Toolkit. The vulnerability is an out-of-bounds read in the jpeg encoding path triggered by a specially crafted input image, where dimensions cause integer overflows in array index calculations. This may lead to a denial of service. Root ...

CVE-2025-23273

The CVE-2025-23273 entry concerns NVIDIA CUDA Toolkit nvJPEG, where a local authenticated user may submit a specially crafted JPEG to trigger a divide-by-zero, resulting in denial of service. Connected Nessus advisories (ALAS2023NVIDIA-2025-146/147/148/149/150/151/152/155, etc.) enumerate multipl...

CVE-2025-23272

NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service...

CVE-2025-23272

NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service...

CVE-2025-23272

NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service...

CVE-2025-23271

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service...

CVE-2025-23271

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service...

NVIDIA CUDA toolkit 缓冲区错误漏洞

The NVIDIA CUDA toolkit is a toolkit from NVIDIA, Inc. It provides a development environment for creating high-performance GPU-accelerated applications. A buffer error vulnerability exists in NVIDIA CUDA Toolkit, which stems from the nvJPEG component mishandling a specific image size, which could...

NVIDIA CUDA toolkit 输入验证错误漏洞

NVIDIA CUDA Toolkit is a development software application for creating high-performance GPU-accelerated applications from NVIDIA. The NVIDIA CUDA Toolkit suffers from an input validation error vulnerability that could be exploited by an attacker to cause a denial of service...

PT-2025-39253

Name of the Vulnerable Software and Affected Versions NVIDIA nvJPEG affected versions not specified Description The software contains a flaw in JPEG encoding that could allow an attacker to trigger an out-of-bounds read by supplying a specially designed image. The image dimensions are crafted to...

NVIDIA nvdisasm RELA section parsing out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2025-2172 NVIDIA nvdisasm RELA section parsing out-of-bounds write vulnerability September 24, 2025 CVE Number CVE-2025-23340 SUMMARY An out-of-bounds write vulnerability exists in the RELA section parsing functionality of NVIDIA nvdisasm 12.8.90. A specially...

NVIDIA nvdisasm REL section header parsing out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2025-2204 NVIDIA nvdisasm REL section header parsing out-of-bounds write vulnerability September 24, 2025 CVE Number CVE-2025-23308 SUMMARY An out-of-bounds write vulnerability exists in the REL section header parsing functionality of NVIDIA nvdisasm 12.9.88. A...

PT-2025-39252

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The NVIDIA CUDA Toolkit contains an issue within the nvJPEG component. A local authenticated user can trigger a divide by zero error by providing a crafted JPEG file. Exploitation...

NVIDIA Megatron-LM 代码注入漏洞

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. A code injection vulnerability exists in the NVIDIA Megatron-LM ensembleclassifer script, which can be exploited by attackers to cause code execution,...

NVIDIA CUDA toolkit 缓冲区错误漏洞

NVIDIA CUDA Toolkit is a development software application for creating high-performance GPU-accelerated applications from NVIDIA. NVIDIA CUDA Toolkit suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a partial denial of service...

NVIDIA nvdisasm REL section header parsing heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2191 NVIDIA nvdisasm REL section header parsing heap-based buffer overflow vulnerability September 24, 2025 CVE Number CVE-2025-23271 SUMMARY A heap-based buffer overflow vulnerability exists in the REL section header parsing functionality of NVIDIA nvdisasm...

PT-2025-39263

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron-LM affected versions not specified Description The software contains a flaw in the ensemble classifer script that could allow an attacker to inject malicious data. Successful exploitation of this issue may result in code...