by Kastro
Paper/Archive/CVE-2025-33244

CVE-2025-33244

NVIDIA Apex — NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data.

EPSS 0.6%CVSS 9.0
critical.is priorityof 100
37
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 49.0.490 × 209.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data. This vulnerability affects environments that use PyTorch versions earlier than 2.6. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, data tampering, and information disclosure.

Affected

ProductAffectedFixed inSource
ApexAll versions that do not include commit db8e053–CNA

Scores by source

nvidia (CNA)9.0CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2025-33244refcve.org/CVERecord?id=CVE-2025-33244refnvidia.custhelp.com/app/answers/detail/a_id/5782