CVE-2026-47473

Deferred Deferred - Pending Action

Write-What-Where Condition in NVIDIA TensorRT-LLM

Publication date: 2026-07-14

Last updated on: 2026-07-15

Assigner: NVIDIA Corporation

Description

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-15

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-47473

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	tensorrt-llm	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-123	Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.

Attack-Flow Graph

Executive Summary

NVIDIA TensorRT-LLM has a vulnerability allowing an attacker to cause a write-what-where condition. This means an attacker could write arbitrary data to any location in memory, potentially leading to serious consequences like data tampering, denial of service, or information disclosure.

Impact Analysis

This vulnerability could allow attackers to modify sensitive data, crash systems, or steal confidential information. If exploited, it may compromise the integrity, availability, and confidentiality of affected systems and data.

Compliance Impact

The vulnerability could lead to data tampering, denial of service, and information disclosure, which may violate GDPR's integrity and confidentiality requirements or HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies

Update NVIDIA TensorRT-LLM to the latest patched version immediately to address the write-what-where condition vulnerability. Monitor NVIDIA's security advisories for updates and apply them promptly.

Hi! I’m here to help you understand CVE-2026-47473. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70