Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-23327 State: PUBLISHED Published: 2025-08-06T12:41:48.803Z Last Updated: 2025-08-06T13:51:53.955Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Triton Inference Server Problem Types: CWE-190 Description: NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through specially crafted inputs. A successful exploit of this vulnerability might lead to denial of service and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23327 - https://www.cve.org/CVERecord?id=CVE-2025-23327 - https:
References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23327 - https://www.cve.org/CVERecord?id=CVE-2025-23327 - https://nvidia.custhelp.com/app/answers/detail/a_id/5687
CVE ID: CVE-2025-23328 State: PUBLISHED Published: 2025-09-17T21:59:21.852Z Last Updated: 2025-09-18T14:03:52.799Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Triton Inference Server Problem Types: CWE-787 Description: NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5691
CVE ID: CVE-2025-23329 State: PUBLISHED Published: 2025-09-17T22:00:06.619Z Last Updated: 2025-09-18T14:03:47.354Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Triton Inference Server Problem Types: CWE-284 Description: NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause memory corruption by identifying and accessing the shared memory region used by the Python backend. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5691
CVE ID: CVE-2025-23330 State: PUBLISHED Published: 2025-10-23T18:25:00.760Z Last Updated: 2025-10-23T19:03:31.405Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: GeForce, NVIDIA RTX, Quadro, NVS, Tesla, Guest driver Problem Types: CWE-476 Description: NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23330 - https://www.cve.org/CVERecord?id=CVE-2025-23330 - https://nvidia.custhelp.com
/nvd.nist.gov/vuln/detail/CVE-2025-23330 - https://www.cve.org/CVERecord?id=CVE-2025-23330 - https://nvidia.custhelp.com/app/answers/detail/a_id/5703
CVE ID: CVE-2025-23331 State: PUBLISHED Published: 2025-08-06T12:42:25.331Z Last Updated: 2025-08-06T13:46:57.547Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Triton Inference Server Problem Types: CWE-789 Description: NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocation with excessive size value, leading to a segmentation fault, by providing an invalid request. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23331 - https://www.cve.org/C
st Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23331 - https://www.cve.org/CVERecord?id=CVE-2025-23331 - https://nvidia.custhelp.com/app/answers/detail/a_id/5687
CVE ID: CVE-2025-23332 State: PUBLISHED Published: 2025-10-23T18:25:26.798Z Last Updated: 2025-10-23T19:03:08.876Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Virtual GPU Manager, GeForce, NVIDIA RTX, Quadro, NVS, Tesla, Guest driver Problem Types: CWE-476 Description: NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deference. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23332 - https://www.cve.org/CVERecord?id=CVE-202
P Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23332 - https://www.cve.org/CVERecord?id=CVE-2025-23332 - https://nvidia.custhelp.com/app/answers/detail/a_id/5703
CVE ID: CVE-2025-23333 State: PUBLISHED Published: 2025-08-06T12:42:55.792Z Last Updated: 2025-08-06T13:43:04.270Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: NVIDIA Products: Triton Inference Server Problem Types: CWE-125 Description: NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by manipulating shared memory data. A successful exploit of this vulnerability might lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23333 - https://www.cve.org/CVERecord?id=CVE-2025
Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23333 - https://www.cve.org/CVERecord?id=CVE-2025-23333 - https://nvidia.custhelp.com/app/answers/detail/a_id/5687
CVE ID: CVE-2025-23334 State: PUBLISHED Published: 2025-08-06T12:43:24.936Z Last Updated: 2025-08-06T13:31:07.946Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: NVIDIA Products: Triton Inference Server Problem Types: CWE-125 Description: NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by sending a request. A successful exploit of this vulnerability might lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23334 - https://www.cve.org/CVERecord?id=CVE-2025-23334 - https
References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23334 - https://www.cve.org/CVERecord?id=CVE-2025-23334 - https://nvidia.custhelp.com/app/answers/detail/a_id/5687
CVE ID: CVE-2025-23335 State: PUBLISHED Published: 2025-08-06T12:44:08.526Z Last Updated: 2025-08-06T13:27:04.273Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Triton Inference Server Problem Types: CWE-191 Description: NVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a vulnerability where an attacker could cause an underflow by a specific model configuration and a specific input. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23335 - https://www.cve.org/CVERecord?id=
CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23335 - https://www.cve.org/CVERecord?id=CVE-2025-23335 - https://nvidia.custhelp.com/app/answers/detail/a_id/5687
CVE ID: CVE-2025-23336 State: PUBLISHED Published: 2025-09-17T22:00:50.766Z Last Updated: 2025-09-18T14:03:41.666Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Triton Inference Server Problem Types: CWE-20 Description: NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause a denial of service by loading a misconfigured model. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5691
CVE ID: CVE-2025-23337 State: PUBLISHED Published: 2025-09-17T22:27:15.541Z Last Updated: 2025-09-19T03:55:11.737Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: HGX GB200, HGX GB300, HGC B300, DGX GB200, HGX GB300, HGC B300 Problem Types: CWE-1244 Description: NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analys
de execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5692
CVE ID: CVE-2025-23338 State: PUBLISHED Published: 2025-09-24T13:12:47.651Z Last Updated: 2025-11-03T18:08:47.082Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-129 Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write by running nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23338 - https://www.cve.org/CVERecord?id=CVE-2025-23338 - htt
r: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23338 - https://www.cve.org/CVERecord?id=CVE-2025-23338 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
CVE ID: CVE-2025-23339 State: PUBLISHED Published: 2025-09-24T13:13:04.746Z Last Updated: 2025-11-03T18:08:48.021Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-121 Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running cuobjdump. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvd.n
nning cuobjdump. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23339 - https://www.cve.org/CVERecord?id=CVE-2025-23339 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
CVE ID: CVE-2025-23340 State: PUBLISHED Published: 2025-09-24T13:13:15.397Z Last Updated: 2025-11-03T18:08:48.953Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23340 - https://www.cve.org/CVERecord?id=
CVE Program Container: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23340 - https://www.cve.org/CVERecord?id=CVE-2025-23340 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
CVE ID: CVE-2025-23342 State: PUBLISHED Published: 2025-09-09T21:02:30.077Z Last Updated: 2025-09-11T03:56:30.667Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVDebug tool Problem Types: CWE-522 Description: The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to a privileged account . A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23342 - https://www.cve.org/CVERecord?id=CVE-2025-23342 - h
ent: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23342 - https://www.cve.org/CVERecord?id=CVE-2025-23342 - https://nvidia.custhelp.com/app/answers/detail/a_id/5696
CVE ID: CVE-2025-23343 State: PUBLISHED Published: 2025-09-09T21:02:50.631Z Last Updated: 2025-09-11T03:56:32.339Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVDebug tool Problem Types: CWE-22 Description: The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to restricted components. A successful exploit of this vulnerability may lead to information disclosure, denial of service, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23343 - https://www.cve.org/CVERecord?id=CVE-2025-23343 - https://nvidia.custhelp.com/app/answers/det
ln/detail/CVE-2025-23343 - https://www.cve.org/CVERecord?id=CVE-2025-23343 - https://nvidia.custhelp.com/app/answers/detail/a_id/5696
CVE ID: CVE-2025-23344 State: PUBLISHED Published: 2025-09-09T21:03:28.237Z Last Updated: 2025-09-11T03:56:33.140Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVDebug tool Problem Types: CWE-78 Description: The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to run code on the platform host as a non-privileged user. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23344 - https://www.cve.org/CVERecord?id=C
ISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23344 - https://www.cve.org/CVERecord?id=CVE-2025-23344 - https://nvidia.custhelp.com/app/answers/detail/a_id/5696
CVE ID: CVE-2025-23345 State: PUBLISHED Published: 2025-10-23T18:25:48.962Z Last Updated: 2025-10-23T19:02:50.583Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: NVIDIA Products: GeForce, NVIDIA RTX, Quadro, NVS, Tesla, Guest driver Problem Types: CWE-125 Description: NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure or denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23345 - https://www.cve.org/CVERecord?id=CVE-
ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23345 - https://www.cve.org/CVERecord?id=CVE-2025-23345 - https://nvidia.custhelp.com/app/answers/detail/a_id/5703
CVE ID: CVE-2025-23346 State: PUBLISHED Published: 2025-09-24T13:13:26.205Z Last Updated: 2025-09-24T14:04:19.650Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-476 Description: NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to a limited denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23346 - https://www.cve.org/CVERecord?id=CVE-2025-23346 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
CVE ID: CVE-2025-23347 State: PUBLISHED Published: 2025-10-23T18:26:10.963Z Last Updated: 2025-10-23T19:00:33.232Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GeForce, NVIDIA RTX, Quadro, NVS, Tesla Problem Types: CWE-276 Description: NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23347 - https://www.cve.org/CVERecord
: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23347 - https://www.cve.org/CVERecord?id=CVE-2025-23347 - https://nvidia.custhelp.com/app/answers/detail/a_id/5703
CVE ID: CVE-2025-23348 State: PUBLISHED Published: 2025-09-24T13:13:43.423Z Last Updated: 2025-09-24T13:57:24.554Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Megatron-LM Problem Types: CWE-94 Description: NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23348 - https://www.cve.o
nalyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23348 - https://www.cve.org/CVERecord?id=CVE-2025-23348 - https://nvidia.custhelp.com/app/answers/detail/a_id/5698
CVE ID: CVE-2025-23349 State: PUBLISHED Published: 2025-09-24T13:13:51.189Z Last Updated: 2025-09-24T13:40:17.779Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Megatron-LM Problem Types: CWE-94 Description: NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23349 - https://www.cve.org/CVERecord
: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23349 - https://www.cve.org/CVERecord?id=CVE-2025-23349 - https://nvidia.custhelp.com/app/answers/detail/a_id/5698
CVE ID: CVE-2025-23352 State: PUBLISHED Published: 2025-10-23T18:36:22.125Z Last Updated: 2025-10-24T03:55:21.721Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Virtual GPU Manager Problem Types: CWE-824 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23352 - https://www.cve
Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23352 - https://www.cve.org/CVERecord?id=CVE-2025-23352 - https://nvidia.custhelp.com/app/answers/detail/a_id/5703
CVE ID: CVE-2025-23353 State: PUBLISHED Published: 2025-09-24T13:14:03.249Z Last Updated: 2025-09-24T13:36:05.459Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Megatron-LM Problem Types: CWE-94 Description: NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23353 - https://www.cve.org/CV
t Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23353 - https://www.cve.org/CVERecord?id=CVE-2025-23353 - https://nvidia.custhelp.com/app/answers/detail/a_id/5698
CVE ID: CVE-2025-23354 State: PUBLISHED Published: 2025-09-24T13:14:14.483Z Last Updated: 2025-09-24T13:35:06.505Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Megatron-LM Problem Types: CWE-94 Description: NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23354 - https://www.cve.org/CV
t Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23354 - https://www.cve.org/CVERecord?id=CVE-2025-23354 - https://nvidia.custhelp.com/app/answers/detail/a_id/5698
CVE ID: CVE-2025-23355 State: PUBLISHED Published: 2025-10-01T21:19:03.848Z Last Updated: 2025-10-03T03:55:32.293Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Nsight Graphics Problem Types: CWE-427 Description: NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23355 - https://www.cve.org/CVERecord?id=CVE-2025-233
nrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23355 - https://www.cve.org/CVERecord?id=CVE-2025-23355 - https://nvidia.custhelp.com/app/answers/detail/a_id/5704
CVE ID: CVE-2025-23356 State: PUBLISHED Published: 2025-10-14T17:39:52.183Z Last Updated: 2025-10-14T18:24:56.017Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Isaac Lab Problem Types: CWE-306 Description: NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5708
CVE ID: CVE-2025-23357 State: PUBLISHED Published: 2025-11-11T16:17:18.904Z Last Updated: 2025-11-14T17:41:52.386Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Megatron-LM Problem Types: CWE-94 Description: NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23357 - https://www.cve.org/CVERecord?id=CVE
A ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23357 - https://www.cve.org/CVERecord?id=CVE-2025-23357 - https://nvidia.custhelp.com/app/answers/detail/a_id/5712