7.8
CVE-2026-47472
- EPSS 0.23%
- Veröffentlicht 14.07.2026 20:01:29
- Zuletzt bearbeitet 15.07.2026 18:20:21
- CVE-Watchlists
- Unerledigt
NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerNVIDIA
≫
Produkt
TensorRT-LLM
Default Statusunaffected
Version <=
v1.3.0 rc16
Version
0.0
Status
affected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.23% | 0.132 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Nvidia | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-502 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
https://nvd.nist.gov/vuln/detail/CVE-2026-47472
https://www.cve.org/CVERecord?id=CVE-2026-47472