ME
Product
Megatron-LM
18
CVEs
0
On KEV
7.8
Max CVSS
3
New 30D
Severity mix
Critical 0High 18Medium 0Low 0
Watch
Add Megatron-LM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-65180 | 7.8 | Oct 13 | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file Affected: 0 to 16.9 |
| CVE-2026-65110 | 7.8 | Oct 13 | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file Affected: 0 to 17 |
| CVE-2026-24152 | 7.8 | Mar 24 | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file Affected: All versions prior to 0.15.3 |
| CVE-2026-24151 | 7.8 | Mar 24 | NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input Affected: All versions prior to 0.15.3 |
| CVE-2026-24150 | 7.8 | Mar 24 | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file Affected: All versions prior to 0.15.3 |
| CVE-2025-33248 | 7.8 | Mar 24 | NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file Affected: All versions prior to 0.15.3 |
| CVE-2025-33247 | 7.8 | Mar 24 | NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution Affected: All versions prior to 0.15.3 |
| CVE-2026-24149 | 7.8 | Feb 3 | NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue Affected: before 0.14.0 |
| CVE-2025-23357 | 7.8 | Nov 11 | NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue Affected: All versions prior to 0.14.0 |
| CVE-2025-23354 | 7.8 | Sep 24 | NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause an injection Affected: before 0.12.3; 0.13.0; 0.13.0; 0.13.0; 0.13.0; 0.13.0; +1 more |
| CVE-2025-23353 | 7.8 | Sep 24 | NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection Affected: before 0.12.3; 0.13.0; 0.13.0; 0.13.0; 0.13.0; 0.13.0; +1 more |
| CVE-2025-23349 | 7.8 | Sep 24 | NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code injection Affected: before 0.12.3; 0.13.0; 0.13.0; 0.13.0; 0.13.0; 0.13.0; +1 more |
| CVE-2025-23348 | 7.8 | Sep 24 | NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue Affected: before 0.12.3; 0.13.0; 0.13.0; 0.13.0; 0.13.0; 0.13.0; +1 more |
| CVE-2025-23306 | 7.8 | Aug 13 | NVIDIA Megatron-LM for all platforms contains a vulnerability in the megatron/training/ arguments.py component where an attacker could cause a code injection issue by providing a… Affected: before 0.12.2 |
| CVE-2025-23305 | 7.8 | Aug 13 | NVIDIA Megatron-LM for all platforms contains a vulnerability in the tools component, where an attacker may exploit a code injection issue Affected: before 0.12.2 |
| CVE-2025-23265 | 7.8 | Jun 24 | NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file Affected: before 0.12.1 |
| CVE-2025-23264 | 7.8 | Jun 24 | NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file Affected: before 0.12.1 |
| CVE-2026-65104 | 7.1 | Oct 13 | NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests Affected: 0 to 17 |
Showing 18