CVE-2021-39158: NVIDIA Nvcaffe

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

NVCaffe's python required dependencies list used to contain `gfortran`version prior to 0.17.4, entry which does not exist in the repository pypi.org. An attacker could potentially have posted malicious files to pypi.org causing a user to install it within NVCaffe.

Affected products

• NVIDIA Nvcaffe: before 0.17.4 (fixed in 0.17.4)

Published 2021-08-23. Last modified 2026-06-17.