NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
References
| Link | Resource |
|---|---|
| https://nvd.nist.gov/vuln/detail/CVE-2025-33248 | Third Party Advisory US Government Resource |
| https://nvidia.custhelp.com/app/answers/detail/a_id/5769 | Vendor Advisory |
| https://www.cve.org/CVERecord?id=CVE-2025-33248 | Third Party Advisory |
Configurations
History
25 Mar 2026, 21:58
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Nvidia megatron-lm
Nvidia |
|
| CPE | cpe:2.3:a:nvidia:megatron-lm:*:*:*:*:*:*:*:* | |
| References | () https://nvd.nist.gov/vuln/detail/CVE-2025-33248 - Third Party Advisory, US Government Resource | |
| References | () https://nvidia.custhelp.com/app/answers/detail/a_id/5769 - Vendor Advisory | |
| References | () https://www.cve.org/CVERecord?id=CVE-2025-33248 - Third Party Advisory |
24 Mar 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-24 21:16
Updated : 2026-03-25 21:58
NVD link : CVE-2025-33248
Mitre link : CVE-2025-33248
CVE.ORG link : CVE-2025-33248
JSON object : View
Products Affected
nvidia
- megatron-lm
CWE
CWE-502
Deserialization of Untrusted Data