NVIDIA nvJPEG Library Out-of-Bounds Read Vulnerability Allowing Information Disclosure or Denial-of-Service

A vulnerability in the NVIDIA nvJPEG library allows an attacker to cause an out-of-bounds read by using a specially crafted JPEG file. Exploiting this vulnerability could lead to information disclosure or a denial-of-service condition.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure or a denial-of-service condition, causing a disruption in service or application functionality.

Remediation

Users are advised to upgrade to NVIDIA CUDA Toolkit 13.0 or CUDA Toolkit 12.9 Update 1. The latest version of the CUDA Toolkit can be downloaded from the NVIDIA Developer website. For more information, visit the NVIDIA Product Security page.