CVE-2026-24227
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
NVIDIA TensorRT contains a vulnerability involving deserialization of untrusted data. Successful exploitation of this vulnerability could lead to code execution.
Risk Assessment
The risk for the organization includes potential remote code execution, which could result in system compromise, data theft, or service disruption.
Recommendation
It is recommended to immediately update NVIDIA TensorRT to the latest version containing the security fix. Additionally, restrict access to deserialization interfaces to trusted users only.
Other vulnerabilities in NVIDIA TensorRT
See all- CVE-2026-24272High
NVIDIA TensorRT contains a vulnerability that may cause a heap-based buffer overflow. An attacker could exploit this flaw to achieve code execution.
- CVE-2026-24268High
A vulnerability in NVIDIA TensorRT allows an attacker to cause a heap-based buffer overflow, potentially leading to code execution.
- CVE-2026-24238High
A vulnerability in NVIDIA TensorRT allows an attacker to cause improper validation of an array index. Successful exploitation could lead to code execution.
- CVE-2026-24188High
Vulnerability in NVIDIA TensorRT allowing an attacker to cause an out-of-bounds write. Successful exploitation might lead to data tampering.
Original NVD description (English source)
NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution.