CNNVD-202509-3870 Information
CNNVD ID
CNNVD-202509-3870
Related CVE
- CNNVD Published: 2025-09-24
Description (Chinese)
NVIDIA CUDA toolkit是美国英伟达（NVIDIA）公司的一个工具包。为创建高性能 GPU 加速应用程序提供了一个开发环境。 NVIDIA CUDA Toolkit存在缓冲区错误漏洞，该漏洞源于nvJPEG组件对特定图像尺寸处理不当，可能导致GPU越界写入，造成拒绝服务和信息泄露。
Description (English)
NVIDIA CUDA toolkit is a toolkit for NVIDIA in the United States. A development environment was provided for the creation of high performance GPU acceleration applications. NVIDIA CUDA Toolkit has a buffer zone error loophole, which stems from the inappropriate handling of specific image dimensions by the NVJPEG component, which could lead to GPU crossing the border, leading to denial of services and information leaks.
Hazard Level
Critical
Vulnerability Type
缓冲区错误
Affected Vendor
NZBGet
Published
2025-09-24
Last Modified
2026-02-24
References
https://nvidia.custhelp.com/app/answers/detail/a_id/5661 https://nvd.nist.gov/vuln/detail/CVE-2025-23275 https://www.cve.org/CVERecord?id=CVE-2025-23275 https://access.redhat.com/security/cve/cve-2025-23275
Patch
https://nvidia.custhelp.com/app/answers/detail/a_id/5661
Share on: