PT-2026-58756

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...

PT-2026-58746

Name of the Vulnerable Software and Affected Versions NVIDIA TensorRT-LLM for Linux affected versions not specified Description A flaw exists in the restricted unpickler used for model weight deserialization. This allows a local, unauthenticated attacker to trigger the deserialization of untruste...

CVE-2026-24268: Heap-based Buffer Overflow

NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution...

PT-2026-58742

Name of the Vulnerable Software and Affected Versions NVIDIA TensorRT-LLM affected versions not specified Description The visual gen server contains a flaw that allows an attacker to trigger unsafe deserialization via unauthorized zeroMQ deserialization. This issue could lead to remote code...

PT-2026-58748

Name of the Vulnerable Software and Affected Versions NVIDIA TensorRT affected versions not specified Description An issue exists where improper validation of an array index can occur. This flaw may allow an attacker to achieve arbitrary code execution. Recommendations At the moment, there is no...

PT-2026-58745

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, dat...

PT-2026-58757

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exploit of this vulnerability might lead to denial of service...

PT-2026-58750

Name of the Vulnerable Software and Affected Versions NVIDIA TensorRT affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold. This issue may allow an attacker to execute arbitrary code. Recommendation...

PT-2026-58758

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47475: Reachable Assertion

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47473: Write-what-where Condition

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...

CVE-2026-24272: Heap-based Buffer Overflow

NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful exploit of this vulnerability might lead to code execution...

CVE-2026-24271: Allocation of Resources Without Limits or Throttling

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-24259: Missing Authentication for Critical Function

NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-24233: Deserialization of Untrusted Data

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of...

CVE-2026-24229: Missing Authentication for Critical Function

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, dat...

CVE-2026-24227: Deserialization of Untrusted Data

NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution...

CVE-2026-24226: Inclusion of Functionality from Untrusted Control Sphere

NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-47472: Deserialization of Untrusted Data

NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service...

CVE-2026-47471: Heap-based Buffer Overflow

NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successful exploit of this vulnerability might lead to information disclosure, data tampering, or denial of service...