GPU VulnDB

Database/NVIDIA / GPU stack

Megatron-LM: Local privesc / RCE via unsafe pickle deserialization

CVE-2025-33247NVIDIA / GPU stackcurated

Impact

Local privesc / RCE via unsafe pickle deserialization

Who can reach it

Malicious checkpoint

What to do

Bump Megatron-LM; rebuild training images

References

https://nvd.nist.gov/vuln/detail/CVE-2025-33247https://github.com/NVIDIA/product-security/tree/main/2026/5769

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.