NVIDIA NVTabular is vulnerable to improper deserialization of untrusted data, a flaw that falls under CWE‑502. An attacker who can supply maliciously crafted serialized objects to NVTabular may be able to force the application to execute arbitrary code, tamper with data, or disclose sensitive information. The reported vulnerability does not specify additional privileges or network access requirements, but it indicates that a successful exploit could have significant confidentiality, integrity, and availability consequences for the affected system.

The affected product is NVIDIA NVTabular. No specific version range is provided in the current advisory, so any deployment of NVTabular that has not been confirmed to contain the fix should be considered at risk.

The CVSS score of 7.8 classifies this issue as High severity. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector involves an attacker providing malicious serialized data to NVTabular, such as through a data ingestion pipeline or API. An exploitation would require the ability to supply the malicious payload; no privileged system state is explicitly required in the advisory.