CVE-2026-47471

Deferred Deferred - Pending Action

Heap Overflow in NVIDIA TensorRT-LLM

Publication date: 2026-07-14

Last updated on: 2026-07-15

Assigner: NVIDIA Corporation

Description

NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successful exploit of this vulnerability might lead to information disclosure, data tampering, or denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-15

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-47471

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	tensorrt-llm	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

Executive Summary

This vulnerability is a heap-based buffer overflow in NVIDIA TensorRT-LLM's tensor deserialization process. It occurs when handling maliciously crafted input data, potentially allowing an attacker to overwrite memory beyond allocated buffers.

Detection Guidance

Detection of this vulnerability requires monitoring for unusual memory access patterns or crashes in TensorRT-LLM applications. Check application logs for heap overflow errors or segmentation faults. Use tools like Valgrind or AddressSanitizer to detect memory corruption during tensor deserialization.

Impact Analysis

An attacker could exploit this to disclose sensitive information, tamper with data integrity, or cause denial of service by crashing the system. This affects systems using TensorRT-LLM for AI model inference.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR's confidentiality requirements or HIPAA's integrity rules. Organizations using affected systems may face compliance violations.

Mitigation Strategies

Update NVIDIA TensorRT-LLM to the latest patched version immediately to address the heap-based buffer overflow vulnerability in tensor deserialization.

Hi! I’m here to help you understand CVE-2026-47471. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70