Lucene search
K

5 matches found

CNVD
CNVD
added 2025/09/28 12:0 a.m.2 views

NVIDIA Megatron-LM msdp preprocessing script code injection vulnerability

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. A code injection vulnerability exists in the NVIDIA Megatron-LM msdp preprocessing script, which can be exploited by attackers to cause code execution,...

7.8CVSS7.2AI score0.00025EPSS
Exploits0References1
OSV
OSV
added 2025/09/24 2:15 p.m.2 views

CVE-2025-23353

NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data...

7.8CVSS7.2AI score0.00025EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/09/24 1:14 p.m.2 views

CVE-2025-23353

NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data...

7.8CVSS0.00025EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/09/24 1:14 p.m.1 views

CVE-2025-23353

NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data...

7.8CVSS6.9AI score0.00025EPSS
Exploits0References3
CVE
CVE
added 2025/09/24 1:14 p.m.12 views

CVE-2025-23353

CVE-2025-23353 affects NVIDIA Megatron-LM across platforms due to a vulnerability in the msdp preprocessing script. The issue enables code injection that can lead to code execution, privilege escalation, information disclosure, and data tampering. Public details identify the affected component as...

7.8CVSS6.9AI score0.00025EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder