NVIDIA Dynamo: RCE via buffer overflow in tensor shape validation

CVSS 8.2CVE-2026-24253NVIDIA / GPU stackcurated

Impact

RCE via buffer overflow in tensor shape validation

Who can reach it

Any inference client

What to do

Bump Dynamo; redeploy the serving stack

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24253 https://github.com/NVIDIA/product-security/tree/main/2026/5842

Related entries

NVIDIA Dynamo: Deserialization of untrusted data in Dynamo reaches denial of service and data tamperingCVE-2026-47623 · NVIDIA DynamoHigh
NVIDIA Dynamo: MITM via improper TLS certificate verificationCVE-2026-24255 · NVIDIA DynamoHigh
NVIDIA Dynamo: Arbitrary file access via path traversalCVE-2026-47612 · NVIDIA DynamoHigh
NVIDIA Dynamo: SSRF via URL handlingCVE-2026-47613 · NVIDIA DynamoHigh
NVIDIA Dynamo: SSRF in remote resource loadingCVE-2026-47614 · NVIDIA DynamoHigh
NVIDIA Dynamo: SSRF in model fetchingCVE-2026-47615 · NVIDIA DynamoHigh

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.