CVE-2025-33204: Code Injection
NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-33204?
CVE-2025-33204 is rated as a high severity vulnerability due to its potential for code execution and privilege escalation.
How do I fix CVE-2025-33204?
To fix CVE-2025-33204, ensure you update to the latest version of the NVIDIA NeMo Framework that resolves this vulnerability.
What can be exploited in CVE-2025-33204?
CVE-2025-33204 can be exploited through malicious data that can lead to code injection and subsequent code execution.
What systems are affected by CVE-2025-33204?
CVE-2025-33204 affects all platforms that utilize the NVIDIA NeMo Framework.
What are the potential consequences of exploiting CVE-2025-33204?
Exploitation of CVE-2025-33204 may result in code execution, escalation of privileges, information disclosure, and data tampering.