Known vulnerabilities in NVIDIA Nemo Framework

Vendor: nVidia
Software: NVIDIA Nemo Framework
Software CPE: cpe:2.3:a:nvidia:nvidia_nemo_framework:*:*:*:*:*:*:*:*
Website: https://www.nvidia.ru/page/home.html
Total vulnerabilities: 25
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NVIDIA Nemo Framework NVIDIA Nemo Framework is affected by 25 known vulnerabilities: 4 high, 5 medium, 16 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134812 - Deserialization of Untrusted Data
CVE-2026-24228		 CWE-502 Low
No
No
 2.7.3 18.06.2026 SB2026061828
#VU134802 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-24252		 CWE-78 Low
No
No
 2.7.3 18.06.2026 SB2026061828
#VU134799 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-24155		 CWE-94 Low
No
No
 2.7.3 18.06.2026 SB2026061828
#VU131823 - Deserialization of Untrusted Data
CVE-2025-33245		 CWE-502 Medium
No
No
 2.6.1 19.05.2026 SB2026051927
#VU131824 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-33236		 CWE-94 Low
No
No
 2.6.1 19.05.2026 SB2026051927
#VU131825 - Deserialization of Untrusted Data
CVE-2025-33241		 CWE-502 Medium
No
No
 2.6.1 19.05.2026 SB2026051927
#VU131826 - Deserialization of Untrusted Data
CVE-2025-33243		 CWE-502 Low
No
No
 2.6.1 19.05.2026 SB2026051927
#VU131827 - Command injection
CVE-2025-33246		 CWE-77 Low
No
No
 2.6.1 19.05.2026 SB2026051927
#VU131828 - Command injection
CVE-2025-33249		 CWE-77 Low
No
No
 2.6.1 19.05.2026 SB2026051927
#VU131829 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-33250		 CWE-94 Low
No
No
 2.6.1 19.05.2026 SB2026051927
#VU131830 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-33251		 CWE-94 Low
No
No
 2.6.1 19.05.2026 SB2026051927
#VU131831 - Deserialization of Untrusted Data
CVE-2025-33252		 CWE-502 Low
No
No
 2.6.1 19.05.2026 SB2026051927
#VU131832 - Deserialization of Untrusted Data
CVE-2025-33253		 CWE-502 Medium
No
No
 2.6.1 19.05.2026 SB2026051927
#VU131821 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-33204		 CWE-94 Low
No
No
 2.5.1 19.05.2026 SB2026051925
#VU131822 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2025-33205		 CWE-829 Medium
No
No
 2.5.1 19.05.2026 SB2026051925
#VU131819 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-23361		 CWE-94 Low
No
No
 2.5.0 19.05.2026 SB2026051924
#VU131820 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-33178		 CWE-94 Low
No
No
 2.5.0 19.05.2026 SB2026051924
#VU131721 - Deserialization of Untrusted Data
CVE-2026-24157		 CWE-502 Low
No
No
 2.6.2 18.05.2026 SB2026051884
#VU131722 - Deserialization of Untrusted Data
CVE-2026-24159		 CWE-502 Low
No
No
 2.6.2 18.05.2026 SB2026051884
#VU131715 - Deserialization of Untrusted Data
CVE-2025-33226		 CWE-502 Low
No
No
 2.5.3 18.05.2026 SB2026051882


Showing elements 1 - 20 out of 25