Nemo (Nvidia) - vulnerabilities (CVEs)

34 CVEs, 0 in the last 30 days, 83 known versions, newest CVE from 2026-07-27. Vendor: Nvidia.

CVEs of Nemo

CVE-2026-24252 - CVSS 7.8 (high), 2026-07-27: NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code…
CVE-2026-24155 - CVSS 7.8 (high), 2026-06-16: NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution,…
CVE-2026-24228 - CVSS 7.8 (high), 2026-06-16: NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this…
CVE-2026-24159 - CVSS 9.8 (critical), 2026-03-24: NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to…
CVE-2026-24157 - CVSS 9.8 (critical), 2026-03-24: NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this…
CVE-2025-33253 - CVSS 7.8 (high), 2026-02-18: NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A…
CVE-2025-33252 - CVSS 7.8 (high), 2026-02-18: NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to…
CVE-2025-33245 - CVSS 8.8 (high), 2026-02-18: NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead…
CVE-2025-33250 - CVSS 7.8 (high), 2026-02-18: NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to…
CVE-2025-33243 - CVSS 7.8 (high), 2026-02-18: NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed environments. A successful exploit of this…
CVE-2025-33249 - CVSS 7.8 (high), 2026-02-18: NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attacker could cause a…
CVE-2025-33246 - CVSS 7.8 (high), 2026-02-18: NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection by supplying…
CVE-2025-33251 - CVSS 7.8 (high), 2026-02-18: NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to…
CVE-2025-33241 - CVSS 7.8 (high), 2026-02-18: NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciously crafted file. A successful exploit…
CVE-2025-33236 - CVSS 7.8 (high), 2026-02-18: NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection. A successful exploit of this…
CVE-2025-33226 - CVSS 7.8 (high), 2025-12-16: NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A successful exploit…
CVE-2025-33212 - CVSS 7.8 (high), 2025-12-16: NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a user loads a…
CVE-2025-33204 - CVSS 7.8 (high), 2025-11-25: NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code…
CVE-2025-33205 - CVSS 7.3 (high), 2025-11-25: NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control…
CVE-2025-33178 - CVSS 7.8 (high), 2025-11-11: NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code…
CVE-2025-23361 - CVSS 7.8 (high), 2025-11-11: NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code…
CVE-2025-23315 - CVSS 7.8 (high), 2025-08-26: NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a…
CVE-2025-23312 - CVSS 7.8 (high), 2025-08-26: NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause…
CVE-2025-23314 - CVSS 7.8 (high), 2025-08-26: NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code…
CVE-2025-23313 - CVSS 7.8 (high), 2025-08-26: NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code…
CVE-2025-23304 - CVSS 9.8 (critical), 2025-08-13: NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo…
CVE-2025-23303 - CVSS 9.8 (critical), 2025-08-13: NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A…
CVE-2025-23251 - CVSS 9.8 (critical), 2025-04-22: NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful…
CVE-2025-23250 - CVSS 9.8 (critical), 2025-04-22: NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary…
CVE-2025-23249 - CVSS 9.8 (critical), 2025-04-22: NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of…
CVE-2025-23360 - CVSS 9.8 (critical), 2025-03-11: NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this…
CVE-2024-0129 - CVSS 7.8 (high), 2024-10-15: NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful…
CVE-2024-0081 - CVSS 8.6 (high), 2024-04-05: NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or…
CVE-2022-22821 - CVSS 4.4 (medium), 2022-01-10: NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are…