An attacker can provide a specially crafted ONNX file to the Model Optimizer's quantization routine, causing unsafe deserialization. This flaw may lead to arbitrary code execution, privilege escalation, data tampering, and information disclosure as described in the vendor’s advisory.

The vulnerability affects NVIDIA’s Model Optimizer product running on both Windows and Linux platforms. No specific software versions are listed, so all installed instances may be at risk if they expose the ONNX quantization feature to untrusted input.

The vulnerability carries a CVSS score of 7.8, indicating high severity. EPSS information is not available, and the flaw is not currently noted in the CISA KEV catalog. The likely attack vector involves an attacker supplying a malicious ONNX file to a user or process that invokes the quantization function, which may be a local or remote threat depending on user permissions and network exposure.