What is the CVSS score of CVE-2025-23273?

CVE-2025-23273 has a CVSS 3.1 base score of 2.5 (Low). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L. EPSS exploitation probability: 0.0%.

Which versions of Cuda Toolkit are affected by CVE-2025-23273?

CVE-2025-23273 is a low-severity vulnerability in NVIDIA CUDA Toolkit for all platforms (CVSS 2.5).

How to fix or mitigate CVE-2025-23273?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Cuda Toolkit CVE-2025-23273

LOW

Divide By Zero (CWE-369)

2025-09-24 psirt@nvidia.com

Denial Of Service Cuda Toolkit Nvidia Nvjpeg

2.5

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:13 vuln.today

CVE Published

Sep 24, 2025 - 14:15 nvd

LOW 2.5

DescriptionNVD

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a divide by zero error by submitting a specially crafted JPEG file. A successful exploit of this vulnerability may lead to denial of service.

AnalysisAI

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a divide by zero error by submitting a specially crafted JPEG file. Rated low severity (CVSS 2.5). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-369. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a divide by zero error by submitting a specially crafted JPEG file. A successful exploit of this vulnerability may lead to denial of service. Affected products include: Nvidia Cuda Toolkit, Nvidia Nvjpeg.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.