NF
Product
NeMo Framework
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 19Medium 0Low 0
Watch
Add NeMo Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-33245 | 8.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution Affected: All versions prior to 2.6.1 |
| CVE-2026-24252 | 7.8 | Jul 27 | NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection Affected: Versions 0.0 to 2.7.2 |
| CVE-2026-24228 | 7.8 | Jun 16 | NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data Affected: Versions 0.0 to 2.7.2 |
| CVE-2026-24155 | 7.8 | Jun 16 | NVIDIA NeMo Framework for all platforms contains a code injection vulnerability Affected: Versions 0.0 to 2.7.2 |
| CVE-2025-33252 | 7.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution Affected: All versions prior to 2.6.1 |
| CVE-2025-33251 | 7.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution Affected: All versions prior to 2.6.1 |
| CVE-2025-33250 | 7.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution Affected: All versions prior to 2.6.1 |
| CVE-2025-33249 | 7.8 | Feb 18 | NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attacker could cause a code injection Affected: All versions prior to 2.6.1 |
| CVE-2025-33246 | 7.8 | Feb 18 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection by supplying crafted input to a… Affected: All versions prior to 2.6.1 |
| CVE-2025-33243 | 7.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed environments Affected: All versions prior to 2.6.1 |
| CVE-2025-33241 | 7.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciously crafted file Affected: All versions prior to 2.6.1 |
| CVE-2025-33236 | 7.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection Affected: All versions prior to 2.6.1 |
| CVE-2025-33226 | 7.8 | Dec 16 | NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection Affected: All versions prior to 2.5.3 |
| CVE-2025-33212 | 7.8 | Dec 16 | NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a user loads a maliciously crafted file Affected: All versions prior to 2.5.3 |
| CVE-2025-33204 | 7.8 | Nov 25 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection Affected: All versions prior to 2.5.1 |
| CVE-2025-33178 | 7.8 | Nov 11 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection Affected: All versions prior to 2.5.0 |
| CVE-2025-23361 | 7.8 | Nov 11 | NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation Affected: All versions prior to 2.5.0 |
| CVE-2025-33253 | 7.3 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file Affected: All versions prior to 2.6.1 |
| CVE-2025-33205 | 7.3 | Nov 25 | NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a… Affected: All versions prior to 2.5.1 |
Showing 19