PT-2026-95545

Name of the Vulnerable Software and Affected Versions LMDeploy versions 0.12.1 through 0.12.2 Description Code injection is possible when loading a malicious HuggingFace model. The issue occurs because the quant dtype value from the model's quantization config is passed to the eval function in...

CVE-2025-33247

NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...