CVE-2025-23272

Public on 2025-09-24
Modified on 2025-09-30
Description
NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.
Severity
Medium severity
Medium
See what this means
CVSS v3 Base Score
5.3
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2023 cuda 2025-10-14 ALAS2023NVIDIA-2025-237 Fixed
Amazon Linux 2023 cuda-12-9 2025-10-14 ALAS2023NVIDIA-2025-238 Fixed
Amazon Linux 2023 cuda-command-line-tools-12-9 2025-10-14 ALAS2023NVIDIA-2025-236 Fixed
Amazon Linux 2023 cuda-compiler-12-9 2025-10-14 ALAS2023NVIDIA-2025-235 Fixed
Amazon Linux 2023 cuda-cudart-12-9 2025-10-14 ALAS2023NVIDIA-2025-233 Fixed
Amazon Linux 2023 cuda-cuobjdump-12-9 2025-10-14 ALAS2023NVIDIA-2025-232 Fixed
Amazon Linux 2023 cuda-cupti-12-9 2025-10-14 ALAS2023NVIDIA-2025-231 Fixed
Amazon Linux 2023 cuda-cuxxfilt-12-9 2025-10-14 ALAS2023NVIDIA-2025-230 Fixed
Amazon Linux 2023 cuda-demo-suite-12-9 2025-10-14 ALAS2023NVIDIA-2025-229 Fixed
Amazon Linux 2023 cuda-documentation-12-9 2025-10-14 ALAS2023NVIDIA-2025-228 Fixed
Amazon Linux 2023 cuda-gdb-12-9 2025-10-14 ALAS2023NVIDIA-2025-227 Fixed
Amazon Linux 2023 cuda-libraries-12-9 2025-10-14 ALAS2023NVIDIA-2025-226 Fixed
Amazon Linux 2023 cuda-libraries-devel-12-9 2025-10-14 ALAS2023NVIDIA-2025-225 Fixed
Amazon Linux 2023 cuda-minimal-build-12-9 2025-10-14 ALAS2023NVIDIA-2025-224 Fixed
Amazon Linux 2023 cuda-nsight-12-9 2025-10-14 ALAS2023NVIDIA-2025-223 Fixed
Amazon Linux 2023 cuda-nsight-compute-12-9 2025-10-14 ALAS2023NVIDIA-2025-222 Fixed
Amazon Linux 2023 cuda-nsight-systems-12-9 2025-10-14 ALAS2023NVIDIA-2025-221 Fixed
Amazon Linux 2023 cuda-nvcc-12-9 2025-10-14 ALAS2023NVIDIA-2025-234 Fixed
Amazon Linux 2023 cuda-nvdisasm-12-9 2025-10-14 ALAS2023NVIDIA-2025-220 Fixed
Amazon Linux 2023 cuda-nvml-devel-12-9 2025-10-14 ALAS2023NVIDIA-2025-219 Fixed
Amazon Linux 2023 cuda-nvprof-12-9 2025-10-14 ALAS2023NVIDIA-2025-218 Fixed
Amazon Linux 2023 cuda-nvprune-12-9 2025-10-14 ALAS2023NVIDIA-2025-217 Fixed
Amazon Linux 2023 cuda-nvrtc-12-9 2025-10-14 ALAS2023NVIDIA-2025-216 Fixed
Amazon Linux 2023 cuda-nvtx-12-9 2025-10-14 ALAS2023NVIDIA-2025-215 Fixed
Amazon Linux 2023 cuda-nvvp-12-9 2025-10-14 ALAS2023NVIDIA-2025-214 Fixed
Amazon Linux 2023 cuda-profiler-api-12-9 2025-10-14 ALAS2023NVIDIA-2025-213 Fixed
Amazon Linux 2023 cuda-runtime-12-9 2025-10-14 ALAS2023NVIDIA-2025-212 Fixed
Amazon Linux 2023 cuda-sanitizer-12-9 2025-10-14 ALAS2023NVIDIA-2025-211 Fixed
Amazon Linux 2023 cuda-toolkit 2025-10-14 ALAS2023NVIDIA-2025-208 Fixed
Amazon Linux 2023 cuda-toolkit-12 2025-10-14 ALAS2023NVIDIA-2025-210 Fixed
Amazon Linux 2023 cuda-toolkit-12-9 2025-10-14 ALAS2023NVIDIA-2025-209 Fixed
Amazon Linux 2023 cuda-tools-12-9 2025-10-14 ALAS2023NVIDIA-2025-207 Fixed
Amazon Linux 2023 cuda-visual-tools-12-9 2025-10-14 ALAS2023NVIDIA-2025-206 Fixed
Amazon Linux 2023 libcublas-12-9 2025-10-14 ALAS2023NVIDIA-2025-204 Fixed
Amazon Linux 2023 libcufft-12-9 2025-10-14 ALAS2023NVIDIA-2025-203 Fixed
Amazon Linux 2023 libcufile-12-9 2025-10-14 ALAS2023NVIDIA-2025-205 Fixed
Amazon Linux 2023 libcusolver-12-9 2025-10-14 ALAS2023NVIDIA-2025-202 Fixed
Amazon Linux 2023 libcusparse-12-9 2025-10-14 ALAS2023NVIDIA-2025-201 Fixed
Amazon Linux 2023 libnpp-12-9 2025-10-14 ALAS2023NVIDIA-2025-200 Fixed
Amazon Linux 2023 libnvfatbin-12-9 2025-10-14 ALAS2023NVIDIA-2025-199 Fixed
Amazon Linux 2023 libnvjitlink-12-9 2025-10-14 ALAS2023NVIDIA-2025-198 Fixed
Amazon Linux 2023 libnvjpeg-12-5 Pending Fix
Amazon Linux 2023 libnvjpeg-12-6 Pending Fix
Amazon Linux 2023 libnvjpeg-12-8 Pending Fix
Amazon Linux 2023 libnvjpeg-12-9 2025-10-14 ALAS2023NVIDIA-2025-197 Fixed
Amazon Linux 2023 libnvjpeg-13-0 Not Affected
Amazon Linux 2023 nvidia-gds 2025-10-14 ALAS2023NVIDIA-2025-195 Fixed
Amazon Linux 2023 nvidia-gds-12-9 2025-10-14 ALAS2023NVIDIA-2025-196 Fixed

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H