CVE-2025-33247 - NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution

Back Back to CVE browser

HIGH

NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution

Published Mar 24, 2026

7.8

HIGH

CVSS 3.1

EPSS 0.32%

Description

NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

Affected products

Vendor NVIDIA Product Megatron LM Default
unaffected
- Version
  All versions prior to 0.15.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

NVIDIA

Megatron LM

unaffected

Version	Status	Constraints
All versions prior to 0.15.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-208974
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-33247
Third Party AdvisoryUS Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5769
Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2025-33247
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-208974		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-33247		Third Party AdvisoryUS Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5769		Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2025-33247		Third Party Advisory