CVE-2025-23275

NVIDIA CUDA Toolkit contains a concrete vulnerability in the nvJPEG component (CVE-2025-23275): a local authenticated user may cause a GPU out-of-bounds write by submitting images with certain dimensions, potentially leading to denial of service and information disclosure. This CVE is discussed i...

CVE-2025-23273

The CVE-2025-23273 entry concerns NVIDIA CUDA Toolkit nvJPEG, where a local authenticated user may submit a specially crafted JPEG to trigger a divide-by-zero, resulting in denial of service. Connected Nessus advisories (ALAS2023NVIDIA-2025-146/147/148/149/150/151/152/155, etc.) enumerate multipl...