CVE-2026-24268

NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://nvd.nist.gov/vuln/detail/CVE-2026-24268	Third Party Advisory US Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5855	Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24268	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nvidia:tensorrt:*:*:*:*:*:*:*:*

History

24 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) NVIDIA TensorRT contiene una vulnerabilidad donde un atacante podría causar un desbordamiento de búfer basado en montículo. Un exploit exitoso de esta vulnerabilidad podría conducir a la ejecución de código.

Information

Published : 2026-07-14 21:16

Updated : 2026-10-24 21:10

NVD link : CVE-2026-24268

Mitre link : CVE-2026-24268

CVE.ORG link : CVE-2026-24268

JSON object : View

Products Affected

nvidia

tensorrt

CWE

CWE-122

Heap-based Buffer Overflow

{"id": "CVE-2026-24268", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24268", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-15T13:15:07.904321Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "psirt@nvidia.com", "affectedData": [{"vendor": "NVIDIA", "product": "TensorRT", "versions": [{"status": "affected", "version": "v0 - v10.16.1", "versionType": "custom", "lessThanOrEqual": "v1.3.0 rc14"}], "platforms": ["All"], "defaultStatus": "unaffected"}]}], "published": "2026-07-14T21:16:44.610", "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24268", "tags": ["Third Party Advisory", "US Government Resource"], "source": "psirt@nvidia.com"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5855", "tags": ["Vendor Advisory"], "source": "psirt@nvidia.com"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-24268", "tags": ["Third Party Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-122"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution."}, {"lang": "es", "value": "NVIDIA TensorRT contiene una vulnerabilidad donde un atacante podr\u00eda causar un desbordamiento de b\u00fafer basado en mont\u00edculo. Un exploit exitoso de esta vulnerabilidad podr\u00eda conducir a la ejecuci\u00f3n de c\u00f3digo."}], "lastModified": "2026-10-24T21:10:00.130", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:tensorrt:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42985B06-48A5-48BA-8558-01CB188D9E5E", "versionEndExcluding": "11.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@nvidia.com"}