CVE-2025-23303

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23303

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23294

CVE-2025-23294 affects NVIDIA WebDataset across platforms. The issue enables an attacker to execute arbitrary code with elevated permissions, causing potential privilege escalation, data tampering, information disclosure, and denial of service . The attack vector is indicated as local with low co...

CVE-2025-23294

NVIDIA WebDataset for all platforms contains a vulnerability where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service...

CVE-2025-23294

NVIDIA WebDataset for all platforms contains a vulnerability where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service...

NVIDIA NeMo library 路径遍历漏洞

NVIDIA NeMo library is a library of deep learning tools from NVIDIA. The NVIDIA NeMo library suffers from a path traversal vulnerability, which originates in the model loading component, that can be exploited by an attacker to obtain sensitive files by accessing locations outside of a restricted...

NVIDIA Triton Inference Server Integer Overflow Vulnerability

Triton Inference Server is a high-performance inference service engine developed by NVIDIA, designed for AI model deployment in production environments, with support for a variety of frameworks TensorFlow, PyTorch, ONNX, etc. and optimized inference performance for GPUs and CPUs. An integer...

NVIDIA Triton Inference Server Code Execution Vulnerability

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A code execution vulnerability exists in NVIDIA Triton Inference Server, which can be exploited by attackers to execute arbitrary code, cau...

PT-2025-33025 · Nvidia · Nvidia Webdataset

Name of the Vulnerable Software and Affected Versions: NVIDIA WebDataset affected versions not specified Description: NVIDIA WebDataset contains an issue that may allow an attacker to execute arbitrary code with elevated permissions. A successful exploit could lead to escalation of privileges, da...

PT-2025-33047 · Nvidia · Nvidia Megatron-Lm

Name of the Vulnerable Software and Affected Versions: NVIDIA Megatron-LM affected versions not specified Description: NVIDIA Megatron-LM contains an issue in the megatron/training/arguments.py component that may allow an attacker to inject code by providing malicious input. A successful exploit...

PT-2025-33027 · Nvidia · Nvidia Nemo Framework

Name of the Vulnerable Software and Affected Versions: NVIDIA NeMo Framework affected versions not specified Description: The NVIDIA NeMo Framework contains a flaw that allows a user to cause deserialization of untrusted data, potentially leading to remote code execution and data tampering...

NVIDIA Triton Inference Server HTTP Service Input Validation Vulnerability

Triton Inference Server is a high-performance inference service engine developed by NVIDIA, designed for AI model deployment in production environments, with support for a variety of frameworks TensorFlow, PyTorch, ONNX, etc. and optimized inference performance for GPUs and CPUs. An input...

NVIDIA Megatron-LM 代码注入漏洞

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. NVIDIA Megatron-LM suffers from a code injection vulnerability that originates in a tool component and can be exploited by an attacker to modify the...

PT-2025-33026 · Nvidia · Nvidia Apex

Name of the Vulnerable Software and Affected Versions: NVIDIA Apex affected versions not specified Description: NVIDIA Apex contains an issue in a Python component that allows an attacker to cause a code injection by providing a malicious file. A successful exploit may lead to code execution,...

PT-2025-33046 · Nvidia · Nvidia Megatron-Lm

Name of the Vulnerable Software and Affected Versions: NVIDIA Megatron-LM affected versions not specified Description: NVIDIA Megatron-LM contains an issue in the tools component that may allow an attacker to exploit a code injection. A successful exploit could lead to code execution, escalation ...

NVIDIA Megatron-LM 代码注入漏洞

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. NVIDIA Megatron-LM suffers from a code injection vulnerability that originates in the megatron/training/arguments.py component, which can be exploited b...

PT-2025-33045

Name of the Vulnerable Software and Affected Versions NVIDIA Merlin Transformers4Rec for all platforms affected versions not specified Description NVIDIA Merlin Transformers4Rec contains a flaw in a Python dependency that could allow an attacker to cause a code injection issue. Successful...

PT-2025-33028

Name of the Vulnerable Software and Affected Versions: NVIDIA NeMo library affected versions not specified Description: The NVIDIA NeMo library contains an issue in the model loading component that allows for code injection by loading maliciously crafted .nemo files. A successful exploit may lead...

PT-2025-33044 · Nvidia · Nvidia Isaac-Gr00T

Name of the Vulnerable Software and Affected Versions: NVIDIA Isaac-GR00T affected versions not specified Description: NVIDIA Isaac-GR00T contains a vulnerability in a Python component that could allow an attacker to inject code. A successful exploit may lead to code execution, escalation of...

NVIDIA Isaac-GR00T 代码注入漏洞

NVIDIA Isaac-GR00T is an open base modeling platform from NVIDIA. The NVIDIA Isaac-GR00T suffers from a code injection vulnerability, which originates in a Python component, that can be exploited by an attacker to perform malicious operations and compromise system stability by bypassing security...