CVE-2025-33236: Code Injection
NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-33236?
CVE-2025-33236 is classified with a high severity level due to the potential for code execution and privilege escalation.
How do I fix CVE-2025-33236?
To fix CVE-2025-33236, it is recommended to update NVIDIA NeMo Framework to version 2.6.1 or later.
What are the consequences of exploiting CVE-2025-33236?
Exploitation of CVE-2025-33236 can lead to code execution, privilege escalation, information disclosure, and data tampering.
Which versions of NVIDIA NeMo are impacted by CVE-2025-33236?
NVIDIA NeMo versions prior to 2.6.1 are affected by CVE-2025-33236.
Who is affected by CVE-2025-33236?
Any user or organization using the vulnerable versions of NVIDIA NeMo Framework is at risk of CVE-2025-33236.