Deserialization Vulnerability in NVIDIA APEX for Linux Affects PyTorch Users
CVE-2025-33244

9CRITICAL

Key Information:

Vendor

Nvidia
Status
Apex
Vendor
CVE Published:
24 March 2026

What is CVE-2025-33244?

NVIDIA APEX for Linux has a vulnerability that allows attackers to exploit a deserialization flaw, enabling the execution of untrusted data. This issue specifically affects environments running PyTorch versions prior to 2.6. If successfully exploited, attackers could potentially trigger code execution, cause denial of service, escalate privileges, manipulate data, or disclose sensitive information, making it crucial for users to assess their systems and update accordingly.

Affected Version(s)

Apex Linux All versions that do not include commit db8e053

References

https://nvd.nist.gov/vuln/detail/CVE-2025-33244
https://www.cve.org/CVERecord?id=CVE-2025-33244
https://nvidia.custhelp.com/app/answers/detail/a_id/5782

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.