CVE-2026-24220

{
  "id": "CVE-2026-24220",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-14T21:16:43.773",
  "lastModified": "2026-10-24T21:10:00.130",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution."
    },
    {
      "lang": "es",
      "value": "NVIDIA TensorRT-LLM para cualquier plataforma contiene una vulnerabilidad en el servidor visual gen, donde un atacante podría causar una deserialización insegura mediante deserialización zeroMQ no autorizada. Un exploit exitoso de esta vulnerabilidad podría conducir a la ejecución de código."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "NVIDIA",
          "product": "TensorRT-LLM",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0",
              "lessThanOrEqual": "v1.3.0 rc11",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 6.4,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "HIGH",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 0.5,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-15T14:19:34.893063Z",
          "id": "CVE-2026-24220",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nvidia:tensorrt-llm:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "1.3.0",
              "matchCriteriaId": "9FA09637-D319-4CAB-B36E-824FD1B6D89C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc0:*:*:*:*:*:*",
              "matchCriteriaId": "C9682645-8527-49BA-8573-3EAF4E7419B2"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "CC1D6966-8D2D-4ECC-9D7B-D4F2DB8AD914"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc10:*:*:*:*:*:*",
              "matchCriteriaId": "C1AED918-E654-49A1-B5FC-C4BB8C104C03"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc11:*:*:*:*:*:*",
              "matchCriteriaId": "1956E5A2-8993-4726-BE6B-BB88CCE66201"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "6E45A0C2-60D0-415C-A7CD-FB489E945169"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "A1516D5F-CCBB-477A-932C-55A6FC4432D4"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc4:*:*:*:*:*:*",
              "matchCriteriaId": "301A082A-3194-44F2-85B7-9A9A574F29C9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc5:*:*:*:*:*:*",
              "matchCriteriaId": "3C440B6F-51EA-4A25-A54C-5158EEA110FB"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc6:*:*:*:*:*:*",
              "matchCriteriaId": "F84C95C2-2B7A-49B8-BC27-24B03436C1A9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc7:*:*:*:*:*:*",
              "matchCriteriaId": "72ECE274-EB57-41F3-A27B-CE2BB2AEA6EC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc8:*:*:*:*:*:*",
              "matchCriteriaId": "C17D81D3-7D58-49BC-AFA0-6D1B48A9E743"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc9:*:*:*:*:*:*",
              "matchCriteriaId": "FAD3A48C-A737-40BE-B66A-55F034E0D59C"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24220",
      "source": "[email protected]",
      "tags": [
        "US Government Resource"
      ]
    },
    {
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24220",
      "source": "[email protected]",
      "tags": [
        "Third Party Advisory"
      ]
    }
  ]
}