The vulnerability involves improper deserialization of data from untrusted sources, specifically in the NVIDIA Megatron Bridge. This flaw is classified as CWE-502 and may lead to code execution, data tampering, and information disclosure if an attacker can supply maliciously crafted serialized input. The potential consequences include compromising the integrity and confidentiality of systems that rely on the bridge and possibly gaining full execution control.

Affected vendor: NVIDIA; product: Megatron Bridge. No specific version information is listed in the CVE data, so all releases of the bridge are potentially impacted until a vendor patch is released.

The CVSS base score of 7.8 indicates a high severity, suggesting that successful exploitation would be highly damaging. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, but the identified weakness (unsanitized deserialization) is a common attack vector for remote code execution. Based on the description, it is inferred that an attacker could trigger this flaw by sending crafted serialized data to the bridge’s interface, possibly over a network connection or an exposed API, thereby provoking the deserialization process and enabling arbitrary code execution.