NE
Product
Nemo
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 25Medium 1Low 0
Watch
Add Nemo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-33245 | 8.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution Affected: before 2.6.1 |
| CVE-2026-24252 | 7.8 | Jul 27 | NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection Affected: before 2.7.3 |
| CVE-2026-24228 | 7.8 | Jun 16 | NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data Affected: before 2.7.3 |
| CVE-2026-24155 | 7.8 | Jun 16 | NVIDIA NeMo Framework for all platforms contains a code injection vulnerability Affected: before 2.7.3 |
| CVE-2025-33252 | 7.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution Affected: before 2.6.1 |
| CVE-2025-33251 | 7.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution Affected: before 2.6.1 |
| CVE-2025-33250 | 7.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution Affected: before 2.6.1 |
| CVE-2025-33249 | 7.8 | Feb 18 | NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attacker could cause a code injection Affected: before 2.6.1 |
| CVE-2025-33246 | 7.8 | Feb 18 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection by supplying crafted input to a… Affected: before 2.6.1 |
| CVE-2025-33243 | 7.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed environments Affected: before 2.6.1 |
| CVE-2025-33241 | 7.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciously crafted file Affected: before 2.6.1 |
| CVE-2025-33236 | 7.8 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection Affected: before 2.6.1 |
| CVE-2025-33226 | 7.8 | Dec 16 | NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection Affected: before 2.5.3 |
| CVE-2025-33212 | 7.8 | Dec 16 | NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a user loads a maliciously crafted file Affected: before 2.5.3 |
| CVE-2025-33204 | 7.8 | Nov 25 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection Affected: before 2.5.1 |
| CVE-2025-33178 | 7.8 | Nov 11 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection Affected: before 2.5.0 |
| CVE-2025-23361 | 7.8 | Nov 11 | NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation Affected: before 2.5.0 |
| CVE-2025-23315 | 7.8 | Aug 26 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a code injection issue Affected: before 2.4.0 |
| CVE-2025-23314 | 7.8 | Aug 26 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue Affected: before 2.4.0 |
| CVE-2025-23313 | 7.8 | Aug 26 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue Affected: before 2.4.0 |
| CVE-2025-23312 | 7.8 | Aug 26 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection Affected: before 2.4.0 |
| CVE-2024-0129 | 7.8 | Oct 15 | NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction Affected: through r2.0.0rc0 |
| CVE-2024-0081 | 7.5 | Apr 5 | NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling Affected: 1.22.0 |
| CVE-2025-33253 | 7.3 | Feb 18 | NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file Affected: before 2.6.1 |
| CVE-2025-33205 | 7.3 | Nov 25 | NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a… Affected: before 2.5.1 |
Showing 25
