NVIDIA TensorRT contains a flaw that allows an attacker to supply malicious serialized data which is processed by a deserialization routine. The vulnerability is categorized as CWE‑502, indicating that the problem arises from handling deserialized input without proper validation. If successfully exploited, an attacker could achieve arbitrary code execution on the host running TensorRT, compromising confidentiality, integrity, and availability of that system.

All deployments that include NVIDIA TensorRT are potentially affected. The CNA listing does not specify affected versions, so any installation that uses TensorRT without additional safeguards could be vulnerable. No specific versions are enumerated, so administrators should verify the installed package version against the vendor’s advisory.

The CVSS v3.1 score of 5.3 classifies this issue as moderate severity. The EPSS score of less than 1% indicates a very low current probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. A successful exploit would require an attacker to supply malicious serialized data to a TensorRT load operation. The attack vector could involve application input, network services, or file ingestion, depending on how the deployment accepts data. Based on the description, it is inferred that the vulnerability does not explicitly state a remote exploitation path; therefore, exploitation likely requires the attacker to have some level of access to supply the payload.