CNNVD-202509-3873 Information
CNNVD ID
CNNVD-202509-3873
Related CVE
- CNNVD Published: 2025-09-24
Description (Chinese)
NVIDIA CUDA toolkit和NVIDIA nvJPEG都是美国英伟达(NVIDIA)公司的产品。NVIDIA CUDA toolkit是一个工具包。为创建高性能 GPU 加速应用程序提供了一个开发环境。NVIDIA nvJPEG是一个图像编解码库。 NVIDIA CUDA toolkit和NVIDIA nvJPEG存在缓冲区错误漏洞,该漏洞源于特制JPEG文件可能导致越界读取,可能导致信息泄露或拒绝服务。
Description (English)
NVIDIA CUDA toolkit and NVIDIA nvJPEG are products of the United States company NVIDIA. NVIDIA CUDA toolkit is a toolkit. A development environment was provided for the creation of high performance GPU acceleration applications. NVIDIA nvJPEG is an image cipher. NVIDIA CUDA toolkit and NVIDIA nvJPEG had an error loophole in the buffer zone, which stemmed from the fact that specially designed JPEG documents could lead to cross-border access and could lead to information leaking or denial of services.
Hazard Level
High
Vulnerability Type
缓冲区错误
Affected Vendor
NZBGet
Published
2025-09-24
Last Modified
2026-02-24
References
https://nvidia.custhelp.com/app/answers/detail/a_id/5661 https://www.cve.org/CVERecord?id=CVE-2025-23272 https://nvd.nist.gov/vuln/detail/CVE-2025-23272 https://access.redhat.com/security/cve/cve-2025-23272
Patch
https://nvidia.custhelp.com/app/answers/detail/a_id/5661
Share on: