CVE-2026-24268

Analyzed Analyzed - Analysis Complete

Heap-based Buffer Overflow in NVIDIA TensorRT

Publication date: 2026-07-14

Last updated on: 2026-07-17

Assigner: NVIDIA Corporation

Description

NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-17

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-24268

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	tensorrt	to 11.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

Executive Summary

NVIDIA TensorRT has a heap-based buffer overflow vulnerability. This means an attacker could exploit it to write more data to a memory buffer than it can hold, potentially corrupting data or executing arbitrary code.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious code on your system, potentially leading to unauthorized access, data theft, or system crashes. It requires user interaction to trigger.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with standards like GDPR or HIPAA. However, a heap-based buffer overflow leading to code execution could potentially compromise data confidentiality, integrity, or availability, which are key concerns for GDPR and HIPAA compliance.

Mitigation Strategies

Update NVIDIA TensorRT to the latest patched version immediately. Apply strict input validation for any applications using TensorRT. Monitor system logs for unusual activity or crashes that may indicate exploitation attempts.

Hi! I’m here to help you understand CVE-2026-24268. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70