VULNERABILITY INTELLIGENCE

CVE-2026-24142

CVSS score6.3 MEDIUM

EPSS probability0.38%

CISA KEVNot currently listed

Published2026-05-20

Last modified2026-07-24

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Description

NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

Weakness classification

psirt@nvidia.com: CWE-502

Primary references

psirt@nvidia.com — Third Party Advisory, US Government Resource
psirt@nvidia.com — Vendor Advisory
psirt@nvidia.com — Third Party Advisory, VDB Entry