Description
NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero. A successful exploit of this vulnerability might lead to denial of service.
Published: 2026-11-03
Score: 5.5 Medium
EPSS: n/a
KEV: No
Impact: Denial of Service via Divide-by-Zero
Action: Patch
AI Analysis

Impact

NVIDIA nvJPEG contains a weakness that can trigger a divide-by-zero error when processing image data. Exploiting this flaw can cause the program to fail and stop functioning, resulting in a denial‑of‑service scenario. The vulnerability is classified under CWE‑369.

Affected Systems

The affected products are NVIDIA CUDA Toolkit and NVIDIA NVJPEG. No specific version information is provided in the advisory, so all released versions of these products may be affected until a patch is applied.

Risk and Exploitability

The CVSS score of 5.5 reflects a moderate severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. No explicit exploit vector is documented, but based on the description it is inferred that an attacker could supply a crafted JPEG to a system that uses nvJPEG to crash the application. The attack requires that the application processing the image is running with sufficient privileges to trigger the divide-by-zero, and it would result in a single‑system service interruption rather than broader compromise.

Generated by OpenCVE AI on November 3, 2026 at 14:21 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update NVIDIA CUDA Toolkit and NVJPEG to the latest released versions that contain the fix.
  • If a patch is not yet available, isolate services that load nvJPEG and restrict processing of untrusted image data to protected environments.
  • Configure monitoring to detect sudden crashes or unexpected termination of processes that use nvJPEG, and set alerts to notify administrators.

Generated by OpenCVE AI on November 3, 2026 at 14:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 03 Nov 2026 14:45:00 +0000

Type Values Removed Values Added
Title Divide‑by‑Zero Vulnerability in NVIDIA nvJPEG Leading to Denial of Service

Tue, 03 Nov 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 03 Nov 2026 13:15:00 +0000

Type Values Removed Values Added
Description NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero. A successful exploit of this vulnerability might lead to denial of service.
Weaknesses CWE-369
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-11-03T13:34:30.328Z

Reserved: 2026-07-21T17:28:46.440Z

Link: CVE-2026-65160

cve-icon Vulnrichment

Updated: 2026-11-03T13:34:26.830Z

cve-icon NVD

Status : Received

Published: 2026-11-03T13:17:23.053

Modified: 2026-11-03T14:17:37.000

Link: CVE-2026-65160

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-03T14:30:08Z

Weaknesses