CVE-2024-0145

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering.

Score

CVSS 3.1 6.8 Medium

Status

Deferred - psirt@nvidia.com

Published

2025-02-12

Last modified

2026-02-26

Weaknesses

CWE-122

Affected products

• Nvjpeg2000 (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5596
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2108
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2113