Known vulnerabilities in Megatron-LM
Vendor:
nVidia
Software:
Megatron-LM
Software CPE:
cpe:2.3:a:nvidia:megatron-lm:*:*:*:*:*:*:*:*
Website:
https://www.nvidia.ru/page/home.html
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131650 - Deserialization of Untrusted Data CVE-2026-24150 |
CWE-502 | Medium | 0.15.3 | 18.05.2026 |
SB2026051844 |
||
| #VU131649 - Deserialization of Untrusted Data CVE-2026-24151 |
CWE-502 | Medium | 0.15.3 | 18.05.2026 |
SB2026051844 |
||
| #VU131648 - Deserialization of Untrusted Data CVE-2026-24152 |
CWE-502 | Medium | 0.15.3 | 18.05.2026 |
SB2026051844 |
||
| #VU131646 - Deserialization of Untrusted Data CVE-2025-33248 |
CWE-502 | Medium | 0.15.3 | 18.05.2026 |
SB2026051844 |
||
| #VU131643 - Deserialization of Untrusted Data CVE-2025-33247 |
CWE-502 | Medium | 0.15.3 | 18.05.2026 |
SB2026051844 |
||
| #VU122400 - Improper Control of Generation of Code ('Code Injection') CVE-2026-24149 |
CWE-94 | Low | 0.14.0 | 05.02.2026 |
SB2025120209 |
||
| #VU118969 - Improper Control of Generation of Code ('Code Injection') CVE-2025-23357 |
CWE-94 | Low | 0.14.0 | 02.12.2025 |
SB2025120209 |