Skip to content
CriticalVulnerability

CVE-2025-33244: NVIDIA APEX for Linux deserialization of untrusted data

Identifier
CVE-2025-33244
Published
Record updated
View JSON
Known exploitation
Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
EPSS
0.6%

Summary

NVIDIA APEX for Linux contains a vulnerability, tracked as CVE-2025-33244 and classified as CWE-502 (Deserialization of Untrusted Data), that lets an unauthorized attacker cause deserialization of untrusted data. The flaw affects environments that use PyTorch versions earlier than 2.6. A successful exploit might lead to code execution, denial of service, escalation of privileges, data tampering, and information disclosure.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.