CVE-2024-0145 - NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially crafted JPEG2000 file

Back Back to CVE browser

MEDIUM

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially crafted JPEG2000 file

Published Feb 12, 2025

6.8

MEDIUM

CVSS 3.1

EPSS 0.92%

Description

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering.

Affected products

Vendor NVIDIA Product nvJPEG2000 Default
unaffected
- Version
  0.8.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

NVIDIA

nvJPEG2000

unaffected

Version	Status	Constraints
0.8.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-122

References (4)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-15944		Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5596
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2108
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2113