The vulnerability in NVIDIA NVTabular allows improper deserialization of untrusted data, a flaw classified as CWE-502. An attacker could exploit this issue to execute arbitrary code, tamper with data, or disclose sensitive information through the deserialization mechanism. The impact is significant because the flaw permits complete compromise of the affected system if an attacker supplies malicious data to the vulnerable component.

The affected product is NVIDIA NVTabular. No specific affected versions are listed in the current data, so all releases prior to an official fix should be considered vulnerable.

The CVSS score of 7.8 indicates high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, so automated exploitation is not known to be active yet. The likely attack vector is the ingestion of untrusted data, which may be supplied over a network, from a user, or from an external source. This inference is drawn from the description that the flaw involves deserialization of untrusted data; therefore, exposure via API endpoints or file inputs that process external data is the most probable route for exploitation.