NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://nvidia.custhelp.com/app/answers/detail/a_id/5855 Vendor Advisory
Vendor advisories in the News 1
- ZDI-26-593: NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Zero Day Initiative: published advisories · 2026-08-24
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · nvidiaNVD modified 2026-10-24 21:10
Affected (CPE criteria) 1
cpe:2.3:a:nvidia:tensorrt:*:*:*:*:*:*:*:*
References 3
- https://nvd.nist.gov/vuln/detail/CVE-2026-24268 Third Party Advisory, US Government Resource
- https://nvidia.custhelp.com/app/answers/detail/a_id/5855 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-24268 Third Party Advisory