CVE-2025-33247 in Megatron LM
Summary
NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Responsible
nvidia
Reservation
04/15/2025
Disclosure
03/24/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 352874 | NVIDIA Megatron LM Configuration deserialization | 502 | Not defined | Not defined | CVE-2025-33247 |