CVE-2025-33244

Published Mar 24, 2026

Last updated 2 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-33244 describes a vulnerability found in NVIDIA APEX for Linux. This flaw allows an unauthorized attacker to trigger a deserialization of untrusted data. The vulnerability specifically impacts environments utilizing PyTorch versions older than 2.6. Exploitation of this issue could potentially result in code execution, denial of service, escalation of privileges, data tampering, and information disclosure.

Description: NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data. This vulnerability affects environments that use PyTorch versions earlier than 2.6. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, data tampering, and information disclosure.
Source: psirt@nvidia.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9
Impact score: 6
Exploitability score: 2.3
Vector string: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

psirt@nvidia.com: CWE-502

Hype score: Not currently trending

References