CVSS 6.4 · Medium EPSS 0,33%
Kerentanan Deserialization of Untrusted Data pada nvidia tensorrt-llm. Skor CVSS 3.1 6.4 (Medium) menurut nvidia.com.
NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| nvidia | tensorrt-llm | Semua versi hingga 1.3.0 |
| nvidia | tensorrt-llm | Versi 1.3.0 rc0 |
| nvidia | tensorrt-llm | Versi 1.3.0 rc1 |
| nvidia | tensorrt-llm | Versi 1.3.0 rc10 |
| nvidia | tensorrt-llm | Versi 1.3.0 rc11 |
| nvidia | tensorrt-llm | Versi 1.3.0 rc2 |
| nvidia | tensorrt-llm | Versi 1.3.0 rc3 |
| nvidia | tensorrt-llm | Versi 1.3.0 rc4 |
| nvidia | tensorrt-llm | Versi 1.3.0 rc5 |
| nvidia | tensorrt-llm | Versi 1.3.0 rc6 |
| nvidia | tensorrt-llm | Versi 1.3.0 rc7 |
| nvidia | tensorrt-llm | Versi 1.3.0 rc8 |
| nvidia | tensorrt-llm | Versi 1.3.0 rc9 |