Megatron-LM: Arbitrary code execution

CVSS 7.8CVE-2025-23265NVIDIA / GPU stackcurated

Impact

Arbitrary code execution

Who can reach it

Malicious model/checkpoint

What to do

Bump Megatron-LM; rebuild training images

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23265 https://github.com/NVIDIA/product-security/tree/main/2025/5663

Related entries

Megatron-LM: Local privesc / RCE via unsafe pickle deserializationCVE-2025-33247 · Megatron-LMHigh
Megatron-LM: RCE via insecure deserializationCVE-2025-33248 · Megatron-LMHigh
Megatron-LM: Arbitrary code execution in the training jobCVE-2025-23264 · Megatron-LMHigh
GPU Display Driver: Local privesc via file permissionsCVE-2025-23276 · GPU Display DriverHigh
vGPU Manager: Guest-to-host escape (stack buffer overflow)CVE-2025-23283 · vGPU ManagerHigh
vGPU Manager: Guest-to-host escape (stack buffer overflow)CVE-2025-23284 · vGPU ManagerHigh

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.