CVE-2025-23359

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use TOCTOU vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service,...

CVE-2025-23359

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use TOCTOU vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service,...

CVE-2025-23359

The CVE-2025-23359 issue affects the NVIDIA container-toolkit for Linux, where a TOCTOU race under default configuration allows a crafted container image to access the host filesystem, potentially enabling code execution, DoS, privilege escalation, information disclosure, or data tampering. Publi...

CVE-2024-53880

The CVE-2024-53880 entry pertains to NVIDIA Triton Inference Server. A vulnerability in the model loading API can trigger an integer overflow/wraparound when loading a model with an extra-large file size, overflow an internal variable, and potentially cause a denial of service. Exploitation detai...

CVE-2024-53880

NVIDIA Triton Inference Server contains a vulnerability in the model loading API, where a user could cause an integer overflow or wraparound error by loading a model with an extra-large file size that overflows an internal variable. A successful exploit of this vulnerability might lead to denial ...

CVE-2024-0112

NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker can cause an improper input validation issue by escalating certain permissions to a limited degree. A successful exploit of this vulnerability might lead to code execution, denial of service, data...

CVE-2024-0142

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2024-0145

The CVE-2024-0145 entry concerns NVIDIA nvJPEG2000 (library version 0.8.0). TALOS documents a heap-based buffer overflow in the Ndecomp parameter handling when parsing JPEG2000 files, which can cause memory corruption and potentially arbitrary code execution. NVIDIA’s own bulletin corroborates th...

CVE-2024-0145

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2024-0145

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2024-0144

CVE-2024-0144 affects NVIDIA nvJPEG2000. Cisco Talos details describe a heap-based buffer overflow in the Ndecomp handling of nvJPEG2000 0.8.0 triggered by a specially crafted JPEG2000 file, causing memory corruption and potential arbitrary code execution. The TALOS report confirms vulnerable ver...

CVE-2024-0144

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to data tampering...

CVE-2024-0144

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to data tampering...

CVE-2024-0143

CVE-2024-0143 affects NVIDIA nvJPEG2000 library (v0.8.0). Talos details describe a memory corruption path: the Coding Style Component (COC) index (Ccoc) is used to access a per-component parameter buffer without proper bounds checks, allowing an out-of-bounds write when Csiz (number of components...

CVE-2024-0143

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2024-0143

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2024-0142

CVE-2024-0142 affects NVIDIA nvJPEG2000 (library used for JPEG2000 decoding/encoding). Talos confirms a memory corruption via an out-of-bounds write in the nvJPEG2000 decoding path when parsing the SIZ/ Csiz and QCC components, where an attacker can supply a crafted JPEG2000 file to trigger an ou...

CVE-2024-0142

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2024-0142

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering...

NVIDIA nvJPEG2000 安全漏洞

NVIDIA nvJPEG2000 is a library from NVIDIA, Inc. for decoding and encoding JPEG2000 images on NVIDIA GPUs. A security vulnerability exists in NVIDIA nvJPEG2000 version 0.8.0, which stems from an out-of-bounds write issue that can be caused by an attacker via a specially crafted JPEG2000 file, and...