What is CVE-2026-24227?

CVE-2026-24227 is a medium-severity vulnerability in Nvidia Tensorrt, classified under Deserialization of Untrusted Data. CVSS score: 5.3/10. Published 2026-07-14.

How severe is CVE-2026-24227?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Deserialization in Nvidia Tensorrt

CVE-2026-24227

NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution.

Vulnerability class: Insecure Deserialization

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Nvidia Tensorrt — versions v0 - v10.16.1

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

psirt@nvidia.com
psirt@nvidia.com
psirt@nvidia.com

Frequently asked questions

What is CVE-2026-24227?: CVE-2026-24227 is a medium-severity vulnerability in Nvidia Tensorrt, classified under Deserialization of Untrusted Data. CVSS score: 5.3/10. Published 2026-07-14.
How severe is CVE-2026-24227?: Medium severity. CVSS v3 base score is 5.3 out of 10.