CVE-2025-23315: Code Injection
NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23315?
CVE-2025-23315 has been classified with a high severity level due to potential for code execution and privilege escalation.
What types of attacks can exploit CVE-2025-23315?
CVE-2025-23315 can be exploited through malicious data inputs that facilitate code injection.
How do I fix CVE-2025-23315?
To mitigate CVE-2025-23315, users should update to the latest version of the NVIDIA NeMo Framework that addresses this vulnerability.
Who is affected by CVE-2025-23315?
CVE-2025-23315 affects all platforms running the NVIDIA NeMo Framework.
What are the potential consequences of CVE-2025-23315?
Exploitation of CVE-2025-23315 could lead to unauthorized code execution, privilege escalation, and potential information disclosure.