CVE-2026-65179

NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information...

EUVD-2026-84406

NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information...

CVE-2026-65179

NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information...

CVE-2026-65179

NVIDIA NeMo Speech is affected by a vulnerability in the TabularTokenizer class, where the software deserializes untrusted, attacker-controlled .pkl files using pickle.load() without sufficient validation (CWE-502 ). Successful exploitation can lead to code execution , data tampering , denial of ...

CVE-2026-65179

NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information...

CVE-2026-65179

NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information...

Security Bulletin: NVIDIA NeMo Speech - September 2026

NVIDIA has released a software update for NVIDIA® NeMo Speech. To protect your system, clone or update this software to version 3.0 or later from NVIDIA-NeMo/Speech on GitHub. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security...

CVE-2026-65179: Deserialization of Untrusted Data

NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information...

PT-2026-96755

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo affected versions not specified Description The TabularTokenizer class contains an unsafe deserialization issue. The software uses the pickle.load function to process untrusted .pkl files provided by an attacker without proper...