CVE-2026-24267

NVIDIA NeMo Speech for all platforms is affected by a vulnerability in the speech data explorer component. An attacker can provide malicious data to trigger remote code execution , which may lead to escalation of privileges , information disclosure , and data tampering . This issue is associated ...

CVE-2026-65178

NVIDIA NeMo contains a vulnerability in its dataset-loading workflow where a maliciously crafted model_config.yaml file can be used to inject unsafe parameters. This issue is associated with CWE-502 (Deserialization of Untrusted Data). A successful exploit could lead to code execution , data tamp...

CVE-2026-24239

NVIDIA NeMo Speech for all platforms contains a vulnerability where processing malicious data created by an attacker can lead to remote code execution . A successful exploit may result in code execution, information disclosure, and data tampering. This issue is associated with CWE-502 (Deserializ...

CVE-2026-65179

NVIDIA NeMo Speech is affected by a vulnerability in the TabularTokenizer class, where the software deserializes untrusted, attacker-controlled .pkl files using pickle.load() without sufficient validation (CWE-502 ). Successful exploitation can lead to code execution , data tampering , denial of ...

CVE-2026-65111

NVIDIA NeMo Speech for all platforms is affected by a code injection vulnerability (CWE-77) where malicious input from an attacker can lead to code execution , information disclosure , and data tampering . The vulnerability impacts versions 0.0 to 2.9 across all platforms. To remediate this, user...