CVE-2025-33213: CVE-2025-33213: güvenilmeyen verinin serileştirmeden çıkarılması

Açıklama (NVD)

NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

Özet bilgiler

CVSS v3.1

8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

%0,66 (yüzdelik 52)

CWE

CWE-502

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• nvd.nist.gov
• nvidia.custhelp.com
• www.cve.org
• CWE-502