CVE-2026-24238

NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code execution.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://nvd.nist.gov/vuln/detail/CVE-2026-24238	Third Party Advisory US Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5855	Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24238	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nvidia:tensorrt:*:*:*:*:*:*:*:*

History

24 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) NVIDIA TensorRT para contiene una vulnerabilidad donde un atacante podría causar una validación incorrecta de índice de array. Un exploit exitoso de esta vulnerabilidad podría conducir a la ejecución de código.

Information

Published : 2026-07-14 21:16

Updated : 2026-10-24 21:10

NVD link : CVE-2026-24238

Mitre link : CVE-2026-24238

CVE.ORG link : CVE-2026-24238

JSON object : View

Products Affected

nvidia

tensorrt

CWE

CWE-129

Improper Validation of Array Index

{"id": "CVE-2026-24238", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24238", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-15T13:15:45.904392Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "psirt@nvidia.com", "affectedData": [{"vendor": "NVIDIA", "product": "TensorRT", "versions": [{"status": "affected", "version": "v0 - v10.16.1", "versionType": "custom", "lessThanOrEqual": "v1.3.0 rc14"}], "platforms": ["All"], "defaultStatus": "unaffected"}]}], "published": "2026-07-14T21:16:44.397", "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24238", "tags": ["Third Party Advisory", "US Government Resource"], "source": "psirt@nvidia.com"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5855", "tags": ["Vendor Advisory"], "source": "psirt@nvidia.com"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-24238", "tags": ["Third Party Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-129"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code execution."}, {"lang": "es", "value": "NVIDIA TensorRT para contiene una vulnerabilidad donde un atacante podr\u00eda causar una validaci\u00f3n incorrecta de \u00edndice de array. Un exploit exitoso de esta vulnerabilidad podr\u00eda conducir a la ejecuci\u00f3n de c\u00f3digo."}], "lastModified": "2026-10-24T21:10:00.130", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:tensorrt:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42985B06-48A5-48BA-8558-01CB188D9E5E", "versionEndExcluding": "11.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@nvidia.com"}