CVE-2025-33248: High severity Nvidia Megatron-LM vulnerability
NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-33248?
CVE-2025-33248 is classified as a critical vulnerability due to its potential for remote code execution.
How does CVE-2025-33248 work?
CVE-2025-33248 allows an attacker to execute arbitrary code by convincing a user to load a specially crafted file.
How do I fix CVE-2025-33248?
To resolve CVE-2025-33248, update to the latest version of NVIDIA Megatron-LM that addresses this vulnerability.
What are the consequences of exploiting CVE-2025-33248?
Exploitation of CVE-2025-33248 can lead to code execution, privilege escalation, and potential data loss.
Who is affected by CVE-2025-33248?
CVE-2025-33248 affects all users of NVIDIA Megatron-LM versions that do not have the vulnerability patched.