199 matches found
EUVD-2025-13062
Malicious code in bioql PyPI...
NVIDIA TensorRT-LLM Deserialization Access
The vulnerability of the library for working with large language models like NVIDIA TensorRT-LM is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow attackers to gain access to the TRTLLM server...
CVE-2025-23335
NVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a vulnerability where an attacker could cause an underflow by a specific model configuration and a specific input. A successful exploit of this vulnerability might lead to denial of service...
NVIDIA TensorRT-LLM python executor code issue vulnerability
NVIDIA TensorRT-LLM is a high-performance inference acceleration library from NVIDIA for defining, optimizing, and executing inference in production environments for large language models LLMs. A code issue vulnerability exists in NVIDIA TensorRT-LLM that stems from insufficient data validation a...
optimum-nvidia (>=0.1.0b5, <=0.1.0b6) potentially affected by CVE-2025-23254 via tensorrt-llm (0.9.0.dev2024031900)
tensorrt-llm PYPI version 0.9.0.dev2024031900 is affected by a known vulnerability. The following packages have a transitive dependency on tensorrt-llm and may be impacted: - optimum-nvidia =0.1.0b5, =0.1.0b6 Source cves: CVE-2025-23254 Source advisory: SNYK:PYTHON-TENSORRTLLM-10255186...
Deserialization of Untrusted Data
Overview tensorrt-llm is a TensorRT-LLM: A TensorRT Toolbox for Large Language Models Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the ZeroMqQueue class in executor.py. An attacker can execute code, disclose information, and tamper with data by gaining...
CVE-2025-23254
NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by local access to the TRTLLM server. A successful exploit of this vulnerability may lead to code execution, information disclosure and data tampering...
CVE-2025-23254
NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by local access to the TRTLLM server. A successful exploit of this vulnerability may lead to code execution, information disclosure and data tampering...
CVE-2025-23254
NVIDIA TensorRT-LLM (TensorRT-LLM Python executor) contains a data-validation vulnerability that can be exploited with local access to the TRTLLM server to achieve code execution, information disclosure, and data tampering. The CVE-2025-23254 entries across NVD/CVE lists describe a Python-executo...
CVE-2025-23254
NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by local access to the TRTLLM server. A successful exploit of this vulnerability may lead to code execution, information disclosure and data tampering...
PT-2025-18651
Name of the Vulnerable Software and Affected Versions NVIDIA TensorRT-LLM affected versions not specified Description The issue concerns a data validation problem in the python executor of NVIDIA TensorRT-LLM, which can be exploited by an attacker with local access to the TRTLLM server. A...
NVIDIA TensorRT-LM Code Issues and Vulnerabilities
NVIDIA TensorRT-LLM is a high-performance inference acceleration library from NVIDIA for defining, optimizing, and executing inference in production environments for large language models LLMs. A code issue vulnerability exists in NVIDIA TensorRT-LLM that stems from insufficient data validation a...
CVE-2025-23254: Deserialization of Untrusted Data
NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by local access to the TRTLLM server. A successful exploit of this vulnerability may lead to code execution, information disclosure and data tampering...
PT-2025-18649
Name of the Vulnerable Software and Affected Versions NVIDIA TensorRT-LLM affected versions not specified NVIDIA vGPU software affected versions not specified Description The issue concerns a data validation problem in the python executor of NVIDIA TensorRT-LLM, which can be exploited by an...
Security Bulletin: NVIDIA TensorRT LLM - April 2025
NVIDIA has released a software update for NVIDIA® TensorRT LLM Framework. To protect your system, download and install the latest release from the https://github.com/NVIDIA/TensorRT/releases page on GitHub. Go to NVIDIA Product Security...
CVE-2024-12720 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-tensorrtllm-24.04...
NVIDIA TensorRT Detection
The Open Source Software OSS components of the NVIDIA TensorRT Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid208130;...
