CVE-2025-33244 CRITICAL

CVE-2025-33244

Vendor Nvidia
Product Apex
Weakness CWE-502 · Unsafe deserialization
Published March 24, 2026
Last update March 25, 2026

CVSS base score

9.0/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data. This vulnerability affects environments that use PyTorch versions earlier than 2.6. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, data tampering, and information disclosure.

Key dates

02Disclosure timeline

March 24, 2026 CVE published
March 25, 2026 Record updated