684 matches found
Arbitrary Code Injection
Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Arbitrary Code Injection. An attacker can execute arbitrary code, escalate privileges, disclose information, or tamper with dat...
collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +22 more potentially affected by CVE-2025-23357 via megatron-core (>=0.2.0, <=0.14.0rc7)
megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.2.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =0.4.2, =1.0.0, =1.0.0, =5.0.7 and more Source cves: CVE-2025-23357 Source advisory: SNYK:PYTHON-MEGATRONCORE-13901364...
CVE-2025-23357
NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering...
collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +22 more potentially affected by CVE-2025-23357 via megatron-core (>=0.2.0, <=0.14.0rc7)
megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.2.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =0.4.2, =1.0.0, =1.0.0, =5.0.7 and more Source cves: CVE-2025-23357 Source advisory: MEND:CVE-2025-23357...
CVE-2025-23357
NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering...
CVE-2025-23357
CVE-2025-23357 affects NVIDIA Megatron-LM across all platforms. The vulnerability resides in a vulnerable script that can process malicious data, enabling a code injection that may lead to code execution, privilege escalation, information disclosure, and data tampering. Documented sources indicat...
CVE-2025-23357: Improper Control of Generation of Code
NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering...
Security Bulletin: NVIDIA Megatron LM - November 2025
NVIDIA has released a software update for NVIDIA® Megatron LM. To protect your system, clone or update this software to version 0.14.0 or later from NVIDIA/Megatron-LM on NVIDIA GitHub. Go to NVIDIA Product Security...
NVIDIA Megatron-LM msdp() Code Execution
The vulnerability of the msdp function in the training library for large language models like NVIDIA Megatron-LM exists due to improper code generation control. Exploiting this vulnerability allows attackers to execute arbitrary code, gain elevated privileges, and expose sensitive information...
NVIDIA Megatron-LM Pretrain GPT Code Execution Privilege Disclosure
The vulnerability of the pretraingpt function in the library for training large language models with NVIDIA Megatron-LM exists due to incorrect code generation control. Exploiting this vulnerability could allow attackers to execute arbitrary code, enhance their privileges, and disclose sensitive...
NVIDIA Megatron-LM tasks/orqa/unsupervised/nq.py Code Execution Privilege
The vulnerability of the tasks/orqa/unsupervised/nq.py component in the NVIDIA Megatron-LM training library involves incorrect code generation control. Exploiting this vulnerability allows attackers to execute arbitrary code, gain elevated privileges, and expose sensitive information...
ensemble_classifer() function in the Code Execution
The vulnerability of the ensembleclassifer function in the library for training large language models with NVIDIA Megatron-LM exists due to improper code generation control. Exploiting this vulnerability allows attackers to execute arbitrary code, gain elevated privileges, and expose sensitive...
EUVD-2025-30971
Malicious code in bioql PyPI...
EUVD-2025-19044
Malicious code in bioql PyPI...
EUVD-2025-30973
Malicious code in bioql PyPI...
EUVD-2025-24626
Malicious code in bioql PyPI...
EUVD-2025-30972
Malicious code in bioql PyPI...
EUVD-2025-24627
Malicious code in bioql PyPI...
NVIDIA Megatron-LM Code Injection Vulnerability (CNVD-2025-23255)
NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. NVIDIA Megatron-LM suffers from a code injection vulnerability that can be exploited by attackers to cause code injection, elevation of privilege,...
NVIDIA Megatron-LM Code Injection Vulnerability
NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. NVIDIA Megatron-LM suffers from a code injection vulnerability that stems from the possibility that the pretraingpt script may process malicious data,...