CVE-2026-24220

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-24220", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "state": "PUBLISHED", "assignerShortName": "nvidia", "dateReserved": "2026-01-21T19:09:35.635Z", "datePublished": "2026-07-14T20:05:36.549Z", "dateUpdated": "2026-07-15T14:19:44.134Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2026-07-14T20:05:36.549Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-502", "description": "CWE-502 Deserialization of Untrusted Data", "type": "CWE"}]}], "impacts": [{"descriptions": [{"lang": "en", "value": "Code Execution"}]}], "affected": [{"vendor": "NVIDIA", "product": "TensorRT-LLM", "versions": [{"status": "affected", "version": "0.0", "lessThanOrEqual": "v1.3.0 rc11", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution."}]}], "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24220"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-24220"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 6.4, "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H"}}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-15T14:19:34.893063Z", "id": "CVE-2026-24220", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-15T14:19:44.134Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-24220", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-15T14:19:34.893063Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-15T14:19:39.326Z"}}], "cna": {"source": {"discovery": "EXTERNAL"}, "impacts": [{"descriptions": [{"lang": "en", "value": "Code Execution"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NVIDIA", "product": "TensorRT-LLM", "versions": [{"status": "affected", "version": "0.0", "versionType": "custom", "lessThanOrEqual": "v1.3.0 rc11"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24220"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-24220"}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution.", "supportingMedia": [{"type": "text/html", "value": "NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-502", "description": "CWE-502 Deserialization of Untrusted Data"}]}], "providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2026-07-14T20:05:36.549Z"}}}, "cveMetadata": {"cveId": "CVE-2026-24220", "state": "PUBLISHED", "dateUpdated": "2026-07-15T14:19:44.134Z", "dateReserved": "2026-01-21T19:09:35.635Z", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "datePublished": "2026-07-14T20:05:36.549Z", "assignerShortName": "nvidia"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "TensorRT-LLM", "vendor": "NVIDIA", "versions": [{"lessThanOrEqual": "v1.3.0 rc11", "status": "affected", "version": "0.0", "versionType": "custom"}]}], "source": "psirt@nvidia.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:tensorrt-llm:*:*:*:*:*:*:*:*", "matchCriteriaId": "9FA09637-D319-4CAB-B36E-824FD1B6D89C", "versionEndIncluding": "1.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc0:*:*:*:*:*:*", "matchCriteriaId": "C9682645-8527-49BA-8573-3EAF4E7419B2", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "CC1D6966-8D2D-4ECC-9D7B-D4F2DB8AD914", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc10:*:*:*:*:*:*", "matchCriteriaId": "C1AED918-E654-49A1-B5FC-C4BB8C104C03", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc11:*:*:*:*:*:*", "matchCriteriaId": "1956E5A2-8993-4726-BE6B-BB88CCE66201", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "6E45A0C2-60D0-415C-A7CD-FB489E945169", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "A1516D5F-CCBB-477A-932C-55A6FC4432D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "301A082A-3194-44F2-85B7-9A9A574F29C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc5:*:*:*:*:*:*", "matchCriteriaId": "3C440B6F-51EA-4A25-A54C-5158EEA110FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc6:*:*:*:*:*:*", "matchCriteriaId": "F84C95C2-2B7A-49B8-BC27-24B03436C1A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc7:*:*:*:*:*:*", "matchCriteriaId": "72ECE274-EB57-41F3-A27B-CE2BB2AEA6EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc8:*:*:*:*:*:*", "matchCriteriaId": "C17D81D3-7D58-49BC-AFA0-6D1B48A9E743", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc9:*:*:*:*:*:*", "matchCriteriaId": "FAD3A48C-A737-40BE-B66A-55F034E0D59C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution."}, {"lang": "es", "value": "NVIDIA TensorRT-LLM para cualquier plataforma contiene una vulnerabilidad en el servidor visual gen, donde un atacante podr\u00eda causar una deserializaci\u00f3n insegura mediante deserializaci\u00f3n zeroMQ no autorizada. Un exploit exitoso de esta vulnerabilidad podr\u00eda conducir a la ejecuci\u00f3n de c\u00f3digo."}], "id": "CVE-2026-24220", "lastModified": "2026-10-24T21:10:00.130", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 5.9, "source": "psirt@nvidia.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24220", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-07-15T14:19:34.893063Z", "version": "2.0.3"}}]}, "published": "2026-07-14T21:16:43.773", "references": [{"source": "psirt@nvidia.com", "tags": ["US Government Resource"], "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24220"}, {"source": "psirt@nvidia.com", "tags": ["Third Party Advisory"], "url": "https://www.cve.org/CVERecord?id=CVE-2026-24220"}], "sourceIdentifier": "psirt@nvidia.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "psirt@nvidia.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0.0,v1.3.0 rc11]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "TensorRT-LLM", "source": "cna", "vendor": "NVIDIA"}, "product": "tensorrt-llm", "vendor": "nvidia"}], "created": "2026-07-15T15:45:04.921976+00:00", "title": "ZeroMQ Unsafe Deserialization in NVIDIA TensorRT-LLM Visual Generation Server", "updated": "2026-07-31T05:15:03.159946+00:00", "vendors": ["nvidia", "nvidia$PRODUCT$tensorrt-llm"]}