CVE-2025-33247 in Megatron LM

Sumário

de MITRE • 24/03/2026

NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsável: Nvidia
• Reservar: 15/04/2025
• Divulgação: 24/03/2026
• Moderação: aceite
• Entrada: VDB-352874
• CPE: pronto
• CWE: CWE-502 (confirmado)
• CVSS: 7.8 (NVD)
• EPSS: 0.00360
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-33247
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-33247
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-33247/