GCVE - cpe:2.3:a:nvidia:merlin_transformers4rec:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nvidia:merlin_transformers4rec:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Nvidia (`40c2793d-f37d-5eb8-a9a9-0c9926e4695b`)
Product	Merlin Transformers4Rec (`4c8fdf44-b7fb-5542-a8a7-a8de12e58bcc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-24162`	vulnerable	2026-06-08 07:51:17.239194	Details available HIGH (7.8) NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure. Published: 2026-05-26T16:12:16.028Z Updated: 2026-05-26T19:22:27.709Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2026-24162 https://www.cve.org/CVERecord?id=CVE-2026-24162 https://nvidia.custhelp.com/app/answers/detail/a_id/5838	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33233`	vulnerable	2026-06-08 07:19:01.945433	Details available HIGH (7.8) NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Published: 2026-01-20T17:43:38.169Z Updated: 2026-01-20T18:47:17.434Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-33233 https://www.cve.org/CVERecord?id=CVE-2025-33233 https://nvidia.custhelp.com/app/answers/detail/a_id/5761	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33213`	vulnerable	2026-06-08 07:19:01.910239	Details available HIGH (8.8) NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. Published: 2025-12-09T17:48:47.438Z Updated: 2025-12-09T20:42:19.666Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-33213 https://www.cve.org/CVERecord?id=CVE-2025-33213 https://nvidia.custhelp.com/app/answers/detail/a_id/5739	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.