CNNVD-202508-3069 Information

CNNVD ID

CNNVD-202508-3069

CVE-2025-23307

  • CNNVD Published: 2025-08-26

Description (Chinese)

NVIDIA NeMo Curator是美国英伟达(NVIDIA)公司的一个用于构建或定制世界基础模型视频的软件。 NVIDIA NeMo Curator存在代码注入漏洞,该漏洞源于恶意文件可能导致代码注入,进而导致代码执行、权限提升、信息泄露和数据篡改。

Description (English)

NVIDIA NeMo Curator is a software for the construction or customization of a world-based model video. NVIDIA NeMo Curator has a code-infusion loophole, which stems from malicious documents that may result in code-injection, resulting in code execution, authority enhancement, information leak and data manipulation.

Hazard Level

Medium

Vulnerability Type

代码注入

Affected Vendor

英伟达

Published

2025-08-26

Last Modified

2026-02-24

References

https://www.cve.org/CVERecord?id=CVE-2025-23307 https://nvidia.custhelp.com/app/answers/detail/a_id/5690 https://nvd.nist.gov/vuln/detail/CVE-2025-23307

Patch

https://nvidia.custhelp.com/app/answers/detail/a_id/5690

Share on: