HIGH🇵🇱 Wersja polska

CVE-2026-24163

CVSS 7.5v3.1pub. 2026-05-20upd. 2026-07-24

NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.

CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
  • Nvidia Tensorrt Llm

    APP
    Nvidia
    < 1.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEDoSDeserialization
CWE
References

Related vulnerabilities

CVE-2025-33255HIGH7.5same product

NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsaf...

CVE-2026-24142MEDIUM6.3same product

NVIDIA TRT-LLM na dowolnej platformie zawiera lukę w deserializacji oraz niezabezpieczoną obsługę serializowan...

CVE-2026-24160MEDIUM5.5same product

NVIDIA TRT-LLM na każdej platformie zawiera podatność, w której atakujący może spowodować niezweryfikowaną war...

CVE-2026-24254CRITICAL9.8PL ✓same vendor

NVIDIA Dynamo (Linux) — zapis poza granicami bufora w warstwie multimodal serving

CVE-2026-24207CRITICAL9.8PL ✓same vendor

Authentication Bypass w NVIDIA Triton Inference Server umożliwiający RCE