NVIDIA Patches High-Severity Flaws in Graphics and AI Tools

NVIDIA has issued a dual high-severity patch for two of its software suites, Nsight Graphics and the Merlin Transformers4Rec framework, with a CVSS score of 7.8 for both flaws. The first vulnerability, tracked as CVE-2025-33206, affects Nsight Graphics for Linux and could allow an attacker to execute malicious commands, potentially leading to code execution, escalation of privileges, data tampering, and denial of service.

The second, CVE-2025-33233, impacts Merlin Transformers4Rec across all platforms and presents a similar code-injection risk that could also cause code execution, data tampering, information disclosure, and privilege escalation. NVIDIA states that all versions lacking a specific security commit are affected by the second flaw and recommends updating to any code branch that includes commit 27ddd49; for the Nsight issue, users are urged to download and install NSIGHT Graphics 2025.5 on Linux.

According to the security bulletin, these flaws threaten development pipelines by exposing systems to dangerous code injection, underlining the need to apply the updates promptly.