GCVE - cpe:2.3:a:nvidia:megatron-lm:0.13.0:rc2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nvidia:megatron-lm:0.13.0:rc2:*:*:*:*:*:*

part: a version: 0.13.0 update: rc2

Vendor	Nvidia (`40c2793d-f37d-5eb8-a9a9-0c9926e4695b`)
Product	Megatron Lm (`a0684f12-08c8-5dd3-842e-8f8c0f5abab6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-23354`	vulnerable	2026-06-08 07:10:55.558170	Details available HIGH (7.8) NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data tampering. Published: 2025-09-24T13:14:14.483Z Updated: 2025-09-24T13:35:06.505Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-23354 https://www.cve.org/CVERecord?id=CVE-2025-23354 https://nvidia.custhelp.com/app/answers/detail/a_id/5698	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23353`	vulnerable	2026-06-08 07:10:55.557472	Details available HIGH (7.8) NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data tampering. Published: 2025-09-24T13:14:03.249Z Updated: 2025-09-24T13:36:05.459Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-23353 https://www.cve.org/CVERecord?id=CVE-2025-23353 https://nvidia.custhelp.com/app/answers/detail/a_id/5698	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23349`	vulnerable	2026-06-08 07:10:55.556664	Details available HIGH (7.8) NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering. Published: 2025-09-24T13:13:51.189Z Updated: 2025-09-24T13:40:17.779Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-23349 https://www.cve.org/CVERecord?id=CVE-2025-23349 https://nvidia.custhelp.com/app/answers/detail/a_id/5698	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23348`	vulnerable	2026-06-08 07:10:55.555009	Details available HIGH (7.8) NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering. Published: 2025-09-24T13:13:43.423Z Updated: 2025-09-24T13:57:24.554Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-23348 https://www.cve.org/CVERecord?id=CVE-2025-23348 https://nvidia.custhelp.com/app/answers/detail/a_id/5698	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.