Vulnerability · Published Mar 24, 2026 · Assigned by nvidia
CVE-2025-33247
High 7.8
In plain English
A high-severity unsafe deserialization in Megatron LM from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 74.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NVIDIA | Megatron LM | All versions prior to 0.15.3 |
Weakness: CWE-502 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H