NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution.
{
"cna_assigner": "nvidia",
"cwe_ids": [
"CWE-502"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24220.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"introduced": "0.0"
},
{
"last_affected": "v1.3.0 rc11"
}
],
"source": "AFFECTED_FIELD"
}
]
}{
"cpe": [
"cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc0:*:*:*:*:*:*",
"cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc1:*:*:*:*:*:*",
"cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc10:*:*:*:*:*:*",
"cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc11:*:*:*:*:*:*",
"cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc2:*:*:*:*:*:*",
"cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc3:*:*:*:*:*:*",
"cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc4:*:*:*:*:*:*",
"cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc5:*:*:*:*:*:*",
"cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc6:*:*:*:*:*:*",
"cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc7:*:*:*:*:*:*",
"cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc8:*:*:*:*:*:*",
"cpe:2.3:a:nvidia:tensorrt-llm:1.3.0:rc9:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "1.3.0-rc0"
},
{
"last_affected": "1.3.0-rc0"
},
{
"introduced": "1.3.0-rc1"
},
{
"last_affected": "1.3.0-rc1"
},
{
"introduced": "1.3.0-rc10"
},
{
"last_affected": "1.3.0-rc10"
},
{
"introduced": "1.3.0-rc11"
},
{
"last_affected": "1.3.0-rc11"
},
{
"introduced": "1.3.0-rc2"
},
{
"last_affected": "1.3.0-rc2"
},
{
"introduced": "1.3.0-rc3"
},
{
"last_affected": "1.3.0-rc3"
},
{
"introduced": "1.3.0-rc4"
},
{
"last_affected": "1.3.0-rc4"
},
{
"introduced": "1.3.0-rc5"
},
{
"last_affected": "1.3.0-rc5"
},
{
"introduced": "1.3.0-rc6"
},
{
"last_affected": "1.3.0-rc6"
},
{
"introduced": "1.3.0-rc7"
},
{
"last_affected": "1.3.0-rc7"
},
{
"introduced": "1.3.0-rc8"
},
{
"last_affected": "1.3.0-rc8"
},
{
"introduced": "1.3.0-rc9"
},
{
"last_affected": "1.3.0-rc9"
}
],
"source": "CPE_STRING"
}