What’s Vulnerable › Vulnerabilities

CVE-2024-0145

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-12 · updated 2026-06-17
• Weakness: CWE-122

Description

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering.

Affected products

• NVIDIA nvJPEG2000: 0.8.0

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5596
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2108
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2113

Get alerted when CVE-2024-0145 or the next vulnerability affects your stack