CVE-2025-23304: Path Traversal
NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23304?
CVE-2025-23304 is considered a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2025-23304?
To fix CVE-2025-23304, ensure your NVIDIA NeMo library is updated to the latest version that patches this vulnerability.
What types of attacks can exploit CVE-2025-23304?
CVE-2025-23304 can be exploited through code injection by loading .nemo files with maliciously crafted metadata.
What are the potential consequences of exploiting CVE-2025-23304?
Exploiting CVE-2025-23304 may lead to remote code execution and data tampering within affected systems.
Which software is affected by CVE-2025-23304?
CVE-2025-23304 affects all platforms using the NVIDIA NeMo library.