TensorRT-LLM: RCE via unsafe pickle deserialization
CVSS 8.8CVE-2025-23254NVIDIA / GPU stackcurated
Impact
RCE via unsafe pickle deserialization
Who can reach it
Malicious model / untrusted engine file
What to do
Bump TensorRT-LLM; rebuild serving images; enforce signed model artifacts
References
Related entries
- TensorRT-LLM: RCE via unsafe deserializationCVE-2026-24233 · TensorRT-LLMHigh
- TensorRT-LLM: RCE via insecure deserialization on model loadCVE-2026-47472 · TensorRT-LLMHigh
- TensorRT-LLM: Privesc via unsafe deserializationCVE-2025-33255 · TensorRT-LLMHigh
- TensorRT-LLM: RCE via insecure config deserializationCVE-2026-24163 · TensorRT-LLMHigh
- TensorRT-LLM: RCE potential (OOB write in tensor manipulation)CVE-2026-47471 · TensorRT-LLMHigh
- TensorRT-LLM: Memory corruption (improper array bounds checking)CVE-2026-47473 · TensorRT-LLMHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.