CNNVD-202509-3871 Information
CNNVD ID
CNNVD-202509-3871
Related CVE
- CNNVD Published: 2025-09-24
Description (Chinese)
NVIDIA CUDA toolkit和NVIDIA nvJPEG都是美国英伟达（NVIDIA）公司的产品。NVIDIA CUDA toolkit是一个工具包。为创建高性能 GPU 加速应用程序提供了一个开发环境。NVIDIA nvJPEG是一个图像编解码库。 NVIDIA CUDA toolkit和NVIDIA nvJPEG存在缓冲区错误漏洞，该漏洞源于处理恶意特制图像时数组索引计算存在整数溢出，可能导致越界读取和拒绝服务。
Description (English)
NVIDIA CUDA toolkit and NVIDIA nvJPEG are products of the United States company NVIDIA. NVIDIA CUDA toolkit is a toolkit. A development environment was provided for the creation of high performance GPU acceleration applications. NVIDIA nvJPEG is an image cipher. NVIDIA CUDA toolkit and NVIDIA nvJPEG had an error loophole in the buffer zone, which stemmed from the integer spill in the indexing of the series of hours used to process maliciously customized images, which could lead to cross-border reading and denial of services.
Hazard Level
High
Vulnerability Type
缓冲区错误
Affected Vendor
NZBGet
Published
2025-09-24
Last Modified
2026-02-24
References
https://nvd.nist.gov/vuln/detail/CVE-2025-23274 https://nvidia.custhelp.com/app/answers/detail/a_id/5661 https://www.cve.org/CVERecord?id=CVE-2025-23274 https://access.redhat.com/security/cve/cve-2025-23274
Patch
https://nvidia.custhelp.com/app/answers/detail/a_id/5661
Share on: