CVE-2025-33247

High CVSS: 7.8

NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

Vendor

Nvidia

Product

Megatron-lm

CWE

CWE-502

Yayın Tarihi

2026-03-24 21:16:24

Güncelleme

2026-03-25 21:58:57

Source Identifier

psirt@nvidia.com

KEV Date Added

Kategoriler

CWE-502 Megatron-lm HIGH Nvidia 2026

Referanslar

https://nvd.nist.gov/vuln/detail/CVE-2025-33247 https://nvidia.custhelp.com/app/answers/detail/a_id/5769 https://www.cve.org/CVERecord?id=CVE-2025-33247

Benzer Kayıtlar

High

CVE-2026-24165

NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful explo…

Medium

CVE-2026-24153

NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful ex…

High

CVE-2026-24154

NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorre…

High

CVE-2026-24164

NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful explo…

High

CVE-2026-24148

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker co…

High

CVE-2026-24159

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit o…