PT-2026-27504 · Nvidia+1 · Nvidia Apex+1

CVE-2025-33244 · Publicado 2026-03-24 · Atualizado 2026-03-27

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Crítica

Vetor base

AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA APEX for Linux (affected versions not specified)

Description The software contains a flaw where an attacker could cause deserialization of untrusted data. A successful exploit could lead to code execution, denial of service, escalation of privileges, data tampering, and information disclosure. The issue affects environments using PyTorch versions prior to 2.6. The vulnerability allows remote code execution with adjacent network access.

Recommendations Update PyTorch to version 2.6 or later.

Correção

RCE

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2025-33244

Produtos afetados

Nvidia Apex

Pytorch

Referências · 8

• https://twitter.com/CveFindCom/status/2036559385716035996 · Publicação no Twitter
• https://cve.org/CVERecord?id=CVE-2025-33244 · Nota de Segurança
• https://twitter.com/the_yellow_fall/status/2036782650950660116 · Publicação no Twitter
• https://twitter.com/bigmacd16684/status/2037535960171159831 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2036563899781439730 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-33244 · Nota de Segurança
• https://twitter.com/0dayPublishing/status/2036543430420009093 · Publicação no Twitter
• https://nvidia.custhelp.com/app/answers/detail/a_id/5782 · Nota