Impact
The vulnerability in NVIDIA BioNeMo Framework is a deserialization flaw that allows untrusted data to be processed. This weakness, identified as CWE-502, could result in code execution, denial of service, information disclosure, and data tampering if an attacker supplies crafted input. The CVSS score of 7.8 indicates a high potential impact on confidentiality, integrity, and availability.
Affected Systems
Affected systems include any deployment of the NVIDIA BioNeMo Framework. No specific version identifiers are provided, so administrators should verify that they are running the latest available release and consult NVIDIA for any advisories. The lack of version detail means all installations of this product are potentially at risk until a patch is applied.
Risk and Exploitability
The exploit requires an attacker to provide serialized data to the framework. While explicit attack vectors are not detailed, it is inferred that any input pathway that accepts serialized formats could be abused. Because the flaw yields full code execution and the CVSS rating is high, the threat level is significant; however, exploit probability data is not provided, and the vulnerability is not listed in KEV. Prompt remediation is advised.
OpenCVE Enrichment