CVE-2026-65142

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-07

Assigner: NVIDIA Corporation

Description

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-07

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-65142

EUVD

EUVD-2026-94049

Affected Vendors & Products

Vendor	Product	Version / Range
NVIDIA	Model-Optimizer	0-0.43.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

NVIDIA Model-Optimizer has a vulnerability allowing deserialization of untrusted data. This could let an attacker execute arbitrary code, modify data, disrupt services, or steal information.

Detection Guidance

Detection of this vulnerability requires checking for deserialization of untrusted data in NVIDIA Model-Optimizer. Monitor logs for unusual serialization patterns or unexpected code execution. Review network traffic for suspicious data transfers to Model-Optimizer components. Ensure input validation is enforced in all Model-Optimizer interfaces.

Impact Analysis

If exploited, it may lead to unauthorized code execution, data tampering, denial of service, or sensitive information disclosure on systems using NVIDIA Model-Optimizer.

Compliance Impact

Exploitation could result in data breaches or unauthorized access, potentially violating GDPR (data protection) or HIPAA (health data privacy) due to information disclosure or data tampering.

Mitigation Strategies

Update NVIDIA Model-Optimizer to the latest patched version immediately. Avoid processing untrusted data files with the tool. Implement strict input validation for all serialized data.

Hi! I’m here to help you understand CVE-2026-65142. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70