CVE-2026-24239

Katalog CVE

CVSS 7.8 · High EPSS 0,35%

Kerentanan Deserialization of Untrusted Data pada nvidia nemo speech. Skor CVSS 3.1 7.8 (High) menurut nvidia.com.

Deskripsi (NVD)

NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.

Rincian

Terbit di NVD

22 September 2026

Terakhir diubah

25 September 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber nvidia.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 26,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/NVIDIA/product-security/tree/main/2026/5885 patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-24239 pemerintah AS
• https://www.cve.org/CVERecord?id=CVE-2026-24239 advisory pihak ketiga