What is the CVSS score of CVE-2026-24160?

CVE-2026-24160 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

NVIDIA TensorRT-LLM CVE-2026-24160

EUVD-2026-31058 MEDIUM

Unchecked Return Value to NULL Pointer Dereference (CWE-690)

2026-05-20 nvidia

GHSA-2wmg-q3rm-p93r

Nvidia Denial Of Service

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

May 20, 2026 - 04:04 vuln.today

DescriptionCVE.org

NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.

AnalysisAI

Null pointer dereference in NVIDIA TensorRT-LLM across all supported platforms allows a local attacker to crash the application and cause denial of service. The flaw stems from an unchecked return value that is subsequently dereferenced, triggering a fault when the returned pointer is null. With a CVSS score of 5.5 and no public exploit or CISA KEV listing identified at time of analysis, real-world risk is moderate and constrained by the local attack vector and mandatory user interaction.

Technical ContextAI

NVIDIA TensorRT-LLM is a high-performance inference library for large language models built on top of NVIDIA's TensorRT engine. The vulnerability is classified as CWE-690 (Unchecked Return Value to NULL Pointer Dereference), a code-quality defect in which a function's return value - which may be NULL on failure - is used without a validity check, causing a dereference of an invalid memory address. The CPE string cpe:2.3:a:nvidia:tensorrt-llm:*:*:*:*:*:*:*:* covers all versions and all platforms, indicating the defect exists in shared library or application code rather than being isolated to a single platform build. The scope is confined (S:U), meaning exploitation does not allow the attacker to cross privilege or process boundaries.

RemediationAI

Consult the NVIDIA security advisory at https://nvidia.custhelp.com/app/answers/detail/a_id/5805 for official patch guidance. A specific fixed version number was not present in the available data, so the patch status is 'patch available per vendor advisory' and the exact remediation version should be confirmed directly from that source before upgrading. As a compensating control, restrict access to environments running TensorRT-LLM so that only trusted users and trusted model artifacts are permitted - since exploitation requires local user interaction, preventing untrusted inputs from reaching the TRT-LLM inference pipeline reduces exposure. Sandboxing or containerizing TRT-LLM inference processes limits the blast radius of a crash to the isolated environment, preserving availability of the broader system.