VYPR
High severity7.8NVD Advisory· Published Sep 24, 2025· Updated Jun 17, 2026

CVE-2025-23353

CVE-2025-23353

Description

NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data tampering.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • cpe:2.3:a:nvidia:megatron-lm:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:nvidia:megatron-lm:*:*:*:*:*:*:*:*range: <0.12.3
    • cpe:2.3:a:nvidia:megatron-lm:0.13.0:-:*:*:*:*:*:*
    • cpe:2.3:a:nvidia:megatron-lm:0.13.0:rc0:*:*:*:*:*:*
    • cpe:2.3:a:nvidia:megatron-lm:0.13.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:nvidia:megatron-lm:0.13.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:nvidia:megatron-lm:0.13.0:rc3:*:*:*:*:*:*
    • cpe:2.3:a:nvidia:megatron-lm:0.13.0:rc4:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: All versions prior to 0.13.1 and 0.12.3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.