CNNVD-202508-1410 Information

CNNVD ID

CNNVD-202508-1410

CVE-2025-23303

  • CNNVD Published: 2025-08-13

Description (Chinese)

NVIDIA Nemo Framework是美国英伟达(NVIDIA)公司的一款用于构建和部署生成式 AI 模型的框架。 NVIDIA NeMo Framework存在代码问题漏洞,该漏洞源于可能导致反序列化不受信任数据,可能导致代码执行和数据篡改。

Description (English)

NVIDIA Nemo Framework is a framework for the construction and deployment of a generated AI model by NVIDIA. NVIDIA NeMo Framework has a code loophole, which stems from the potential for anti-serialization untrusted data, which could lead to code execution and data manipulation.

Hazard Level

Medium

Vulnerability Type

代码问题

Affected Vendor

英伟达

Published

2025-08-13

Last Modified

2026-02-24

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23303 https://nvidia.custhelp.com/app/answers/detail/a_id/5686 https://www.cve.org/CVERecord?id=CVE-2025-23303

Patch

https://nvidia.custhelp.com/app/answers/detail/a_id/5686

Share on: