CVE-2023-31028

LowCVSS 2.8/10Last modified Jun 17, 2026

Description

NVIDIA nvJPEG2000 Library for Windows and Linux contains a vulnerability where improper input validation might enable an attacker to use a specially crafted input file. A successful exploit of this vulnerability might lead to a partial denial of service.

Metrics

CVSS 3.1 2.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
NVIDIAnvJPEG2000 LibraryAll versions prior to nvJPEG2000 v0.7.x

References

Timeline

Published
Apr 5, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-310299.8NVIDIA DGX A100 baseboard management controller (BMC) contains a vulnerability in the host KVM daemon, where an unauthenticated attacker mayCVE-2023-31035.9Authentication bypass vulnerability, the exploitation of which could allow a local attacker to perform a Man-in-the-Middle (MITM) attack on CVE-2023-310309.8NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sendingCVE-2023-310317.8NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local accCVE-2023-310325.5NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access. A successful exploit ofCVE-2023-310338.0NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent neCVE-2023-310347.8NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integerCVE-2023-310357.8NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrCVE-2023-310368.8NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line oCVE-2023-310377.2NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network calCVE-2023-310388.8SQL injection in Log4cxx when using the ODBC appender to send log messages to a database.  No fields sent to the database were properly escaCVE-2023-310399.8Security vulnerability in Apache bRPC <1.5.0 on all platforms allows attackers to execute arbitrary code via ServerOptions::pid_file. An att
CVE-2023-31028: Low severity, CVSS 2.8 | Vulnix