CVE-2026-24227

NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://nvd.nist.gov/vuln/detail/CVE-2026-24227	Third Party Advisory US Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5855	Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24227	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nvidia:tensorrt:*:*:*:*:*:*:*:*

History

24 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) NVIDIA TensorRT para contiene una vulnerabilidad donde un usuario podría causar una deserialización de datos no confiables. Un exploit exitoso de esta vulnerabilidad podría conducir a la ejecución de código.

Information

Published : 2026-07-14 21:16

Updated : 2026-10-24 21:10

NVD link : CVE-2026-24227

Mitre link : CVE-2026-24227

CVE.ORG link : CVE-2026-24227

JSON object : View

Products Affected

nvidia

tensorrt

CWE

CWE-502

Deserialization of Untrusted Data

{"id": "CVE-2026-24227", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24227", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-15T13:16:12.904418Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@nvidia.com", "affectedData": [{"vendor": "NVIDIA", "product": "TensorRT", "versions": [{"status": "affected", "version": "v0 - v10.16.1", "versionType": "custom", "lessThanOrEqual": "v1.3.0 rc14"}], "platforms": ["All"], "defaultStatus": "unaffected"}]}], "published": "2026-07-14T21:16:43.983", "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24227", "tags": ["Third Party Advisory", "US Government Resource"], "source": "psirt@nvidia.com"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5855", "tags": ["Vendor Advisory"], "source": "psirt@nvidia.com"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-24227", "tags": ["Third Party Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-502"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution."}, {"lang": "es", "value": "NVIDIA TensorRT para contiene una vulnerabilidad donde un usuario podr\u00eda causar una deserializaci\u00f3n de datos no confiables. Un exploit exitoso de esta vulnerabilidad podr\u00eda conducir a la ejecuci\u00f3n de c\u00f3digo."}], "lastModified": "2026-10-24T21:10:00.130", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:tensorrt:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42985B06-48A5-48BA-8558-01CB188D9E5E", "versionEndExcluding": "11.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@nvidia.com"}