CVE-2024-0129

NVIDIA / NeMo PUBLISHED

Description (CNA)

NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering.

Affected (CNA)

Vendor / product	Versions
NVIDIA / NeMo	affected All versions prior to r2.0.0rc0

CWE

CWE-22

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5580

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.