CVE-2025-23273

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a divide by zero error by submitting a specially crafted JPEG file. A successful exploit of this vulnerability may lead to denial of service.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*
OR cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:nvidia:nvjpeg:-:*:*:*:*:*:*:*
OR cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:nvidia:driveos:-:*:*:*:*:*:*:*
cpe:2.3:o:nvidia:linux_for_tegra:-:*:*:*:*:*:*:*

History

06 Oct 2025, 14:55

Type Values Removed Values Added
References () https://nvd.nist.gov/vuln/detail/CVE-2025-23273 - () https://nvd.nist.gov/vuln/detail/CVE-2025-23273 - Technical Description
References () https://nvidia.custhelp.com/app/answers/detail/a_id/5661 - () https://nvidia.custhelp.com/app/answers/detail/a_id/5661 - Vendor Advisory
References () https://www.cve.org/CVERecord?id=CVE-2025-23273 - () https://www.cve.org/CVERecord?id=CVE-2025-23273 - Third Party Advisory
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:nvidia:linux_for_tegra:-:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:nvjpeg:-:*:*:*:*:*:*:*
cpe:2.3:o:nvidia:driveos:-:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
First Time Nvidia nvjpeg
Microsoft windows
Linux
Linux linux Kernel
Nvidia
Nvidia cuda Toolkit
Nvidia linux For Tegra
Microsoft
Nvidia driveos

24 Sep 2025, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-09-24 14:15

Updated : 2025-10-06 14:55


NVD link : CVE-2025-23273

Mitre link : CVE-2025-23273

CVE.ORG link : CVE-2025-23273


JSON object : View

Products Affected

nvidia

  • linux_for_tegra
  • nvjpeg
  • driveos
  • cuda_toolkit

microsoft

  • windows

linux

  • linux_kernel
CWE
CWE-369

Divide By Zero