CVE-2025-33247

Published: Mar 24, 2026Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

Affected (1)

Products: Nvidia: Megatron Lm

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nvidia Megatron Lm	Before 0.15.3

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-33247

Source: psirt@nvidia.com

Third Party AdvisoryUS Government Resource

https://nvidia.custhelp.com/app/answers/detail/a_id/5769

Source: psirt@nvidia.com

Vendor Advisory

https://www.cve.org/CVERecord?id=CVE-2025-33247

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.