Nvidia Product Security Update Advisory

Overview

 

We have released security updates to fix vulnerabilities in Nvidia products. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-23264, CVE-2025-23265

 

Megatron-LM Versions: 0.12.0 and earlier

 

Resolved Vulnerabilities

 

Code injection vulnerability via malicious files in Nvidia Megatron-LM (CVE-2025-23264, CVE-2025-23265)

 

Vulnerability Patches

 

Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2025-23264, CVE-2025-23265

 

Megatron-LM Version: 0.12.1

 

References

 

[1] Security Bulletin: NVIDIA Megatron LM – June 2025
https://nvidia.custhelp.com/app/answers/detail/a_id/5663