NVIDIA Megatron-lm vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting NVIDIA Megatron-lm: 10 record(s), with affected versions and fixes.cpe:2.3:a:nvidia:megatron-lm
CVE-2026-65180
High · 7.8
CWE-502 Oct 13, 2026
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an...
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-65110
High · 7.8
CWE-502 Oct 13, 2026
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause...
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-65104
High · 7.1
CWE-328 Oct 13, 2026
NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker...
NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.
CVE-2026-24152
High · 7.8
CWE-502 Mar 24, 2026
Deserialization of Untrusted Data in NVIDIA Megatron-lm
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24151
High · 7.8
CWE-502 Mar 24, 2026
Deserialization of Untrusted Data in NVIDIA Megatron-lm
NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24150
High · 7.8
CWE-502 Mar 24, 2026
Deserialization of Untrusted Data in NVIDIA Megatron-lm
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33248
High · 7.8
CWE-502 Mar 24, 2026
Deserialization of Untrusted Data in NVIDIA Megatron-lm
NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33247
High · 7.8
CWE-502 Mar 24, 2026
Deserialization of Untrusted Data in NVIDIA Megatron-lm
NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24149
High · 7.8
CWE-94 Feb 3, 2026
Code Injection in NVIDIA Megatron-lm
NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering.
CVE-2025-23357
High · 7.8
CWE-94 Nov 11, 2025
Code Injection in NVIDIA Megatron-lm
NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering.