{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-24T15:32:10.088","vulnerabilities":[{"cve":{"id":"CVE-2025-23312","sourceIdentifier":"psirt@nvidia.com","published":"2025-08-26T19:15:38.610","lastModified":"2026-06-17T08:53:25.283","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering."},{"lang":"es","value":"NVIDIA NeMo Framework para todas las plataformas contiene una vulnerabilidad en el componente de servicios de recuperación, donde datos maliciosos creados por un atacante podrían provocar una inyección de código. Una explotación exitosa de esta vulnerabilidad podría provocar la ejecución de código, la escalada de privilegios, la divulgación de información y la manipulación de datos."}],"affected":[{"source":"psirt@nvidia.com","affectedData":[{"vendor":"NVIDIA","product":"NeMo Framework","defaultStatus":"unaffected","platforms":["Windows","Linux","macOS"],"versions":[{"version":"All versions prior to 2.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@nvidia.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-27T03:55:17.825739Z","id":"CVE-2025-23312","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@nvidia.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:nemo:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.0","matchCriteriaId":"395B2CEF-62EC-4AF0-A433-C5D93FD43605"}]}]}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23312","source":"psirt@nvidia.com","tags":["US Government Resource"]},{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5689","source":"psirt@nvidia.com","tags":["Vendor Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-23312","source":"psirt@nvidia.com","tags":["Third Party Advisory"]}]}}]}