Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-23304
7.8
HIGHCVSS v3
Severity scale
010
Description
NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering.
NVIDIA-NeMo/NeMo
GitHubA scalable generative AI framework built for researchers and developers working on Large Language Models, Multimodal, and Speech AI (Automatic Speech Recognition and Text-to-Speech)
GitHubA scalable generative AI framework built for researchers and developers working on Large Language Models, Multimodal, and Speech AI (Automatic Speech Recognition and Text-to-Speech)< 2.3.2NVD