NVIDIA Merlin Vulnerabilities Let Attackers Execute Malicious Code and Trigger DoS Condition

Cybersecuritynews •Abinaya • December 15, 2025

Security patches for the Merlin framework addressing two high-severity deserialization vulnerabilities. That could allow attackers to execute arbitrary code and launch denial-of-service attacks on affected Linux systems. NVIDIA researchers have identified two vulnerabilities in Merlin components that leverage insecure deserialization. Both CVE-2025-33214 and CVE-2025-33213 carry CVSS base scores of 8.8, indicating high-severity threats that require […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

NVIDIA Merlin Vulnerabilities Enable Code Execution and DoS Attacks NVIDIA has released security patches for its Merlin machine learning framework due to two high-severity deserialization vulnerabilities. These vulnerabilities, identified as CVE-2025-33214 and CVE-2025-33213, could allow attackers to execute arbitrary code and launch denial-of-service attacks on affected Linux systems. The flaws were found in the NVTabular and Transformers4Rec components of the framework. 3 sources 30

Extracted Entities

NVIDIA Merlin Vulnerabilities Let Attackers Execute Malicious Code and Trigger DoS Condition

The full story

Extracted Entities

Attack Types (1)

CVEs (2)

Platforms (1)

Vulnerabilities (1)