Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wh6g-3g9q-9246

Опубликовано: 24 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

EPSS

Процентиль: 10%
0.00036
Низкий

7.8 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 7.8
nvd
5 месяцев назад

NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

CVSS3: 7.8
fstec
5 месяцев назад

Уязвимость функции pretrain_gpt() библиотеки для обучения больших языковых моделей NVIDIA Megatron-LM, позволяющая нарушителю выполнить произвольный код, повысить свои привилегии и раскрыть защищаемую информацию

EPSS

Процентиль: 10%
0.00036
Низкий

7.8 High

CVSS3

Дефекты

CWE-94