CVE-2025-23250

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23249

NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23249

NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23249

CVE-2025-23249 (NVIDIA NeMo Framework) : The vulnerability allows deserialization of untrusted data leading to remote code execution, with potential code execution and data tampering. Affected software is the NVIDIA NeMo Framework (versions prior to 25.02); remediation guidance in connected docs ...

NVIDIA Nemo Framework 代码问题漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code issue vulnerability exists in the NVIDIA Nemo Framework, which stems from the fact that deserializing untrusted data could lead to remote code execution and data tampering...

NVIDIA Nemo Framework 路径遍历漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A path traversal vulnerability exists in NVIDIA Nemo Framework, which stems from an improper pathname restriction that could lead to arbitrary file writes and code execution...

NVIDIA NvContainer 安全漏洞

NVIDIA NvContainer is a container management service from NVIDIA. NVIDIA NvContainer suffers from a trust management issue vulnerability that stems from a hard-coded path issue in the use of OpenSSL, which could be exploited by an attacker to cause code execution, denial of service, elevation of...

NVIDIA Nemo Framework 代码注入漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code injection vulnerability exists in NVIDIA Nemo Framework, which stems from improper code generation controls that could lead to remote code execution and data tampering...

PT-2025-17587 · Nvidia +1 · Nvidia Nvcontainer +1

Name of the Vulnerable Software and Affected Versions: NVIDIA NvContainer service for Windows affected versions not specified Description: The issue is related to the usage of OpenSSL in the NVIDIA NvContainer service for Windows, where a hard-coded constant can be exploited by an attacker. This...

Security Bulletin: NVIDIA App - April 2025

NVIDIA has released a software update for the NVIDIA App. To protect your system, download and install the latest version of NVIDIA App from the NVIDIA App site. Go to NVIDIA Product Security. Details This section provides a summary of potential vulnerabilities that this security update addresses...

PT-2025-17550 · Nvidia · Nvidia Nemo Framework

Name of the Vulnerable Software and Affected Versions: NVIDIA NeMo Framework affected versions not specified Description: The issue is related to improper control of code generation, which could be exploited through remote code execution. A successful exploit might lead to code execution and data...

PT-2025-17549

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework affected versions not specified Description The issue is related to an improper limitation of a pathname to a restricted directory by an arbitrary file write, which could lead to code execution and data tampering...

Security Bulletin: NVIDIA NeMo - April 2025

NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, download and install the latest release from NVIDIA GitHub. Go to NVIDIA Product Security...

PT-2025-17548

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework versions prior to 25.02 Description The NVIDIA NeMo Framework contains a vulnerability that allows a user to deserialize untrusted data through remote code execution. A successful exploit of this issue might lead to code...

AZL-65664 CVE-2025-22872 affecting package nvidia-container-toolkit for versions less than 1.17.8-3

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

AZL-65667 CVE-2025-22872 affecting package nvidia-container-toolkit for versions less than 1.17.8-2

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

Low: cuda-toolkit-12-8

Issue Overview: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-53870...

Low: cuda-runtime-12-8

Issue Overview: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-53870...

Low: nvidia-fs

Issue Overview: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-53870...

Low: nvidia-gds

Issue Overview: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-53870...