EUVD-2026-15003Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe deserialization by providing a specially crafted input file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
AnalysisAI
NVIDIA Model Optimizer for Windows and Linux contains an unsafe deserialization vulnerability in its ONNX quantization feature that allows attackers to execute arbitrary code by providing a malicious input file. Users who process untrusted ONNX model files are at risk of complete system compromise, including code execution, privilege escalation, data tampering, and information disclosure. There is no current evidence of active exploitation (not in CISA KEV) or public proof-of-concept availability.
Technical ContextAI
This vulnerability affects NVIDIA Model Optimizer (CPE: cpe:2.3:a:nvidia:nvidia_model_optimizer), a tool used for optimizing machine learning models, specifically in its ONNX (Open Neural Network Exchange) quantization functionality. The root cause is CWE-502 (Deserialization of Untrusted Data), where the application deserializes data from ONNX model files without proper validation. ONNX is a widely-used open format for representing machine learning models, and quantization is the process of reducing model precision to improve performance. When the application deserializes specially crafted ONNX files, malicious serialized objects can be instantiated, leading to arbitrary code execution in the context of the application.
RemediationAI
Users should immediately consult the NVIDIA security advisory at https://nvidia.custhelp.com/app/answers/detail/a_id/5798 for official patch information and upgrade to the latest patched version of NVIDIA Model Optimizer as specified in the advisory. Until patching is completed, organizations should implement strict controls around ONNX model file processing: only accept models from trusted, verified sources; implement file integrity verification using cryptographic signatures; isolate Model Optimizer operations in sandboxed environments with restricted privileges; and establish manual review processes for all external ONNX files before processing. Consider disabling the ONNX quantization feature if not operationally required. Network segmentation should be applied to systems running Model Optimizer to limit potential lateral movement if exploitation occurs.
Windows MSHTML component contains a remote code execution vulnerability that allows attackers to craft malicious ActiveX
Windows Win32k contains an out-of-bounds write vulnerability enabling local privilege escalation to SYSTEM, exploited by
The Windows VBScript engine contains a remote code execution vulnerability in object handling that allows full system co
Windows Win32k fails to properly handle objects in memory, allowing local privilege escalation exploited in the wild in
A privilege escalation vulnerability (CVSS 5.5). Risk factors: actively exploited (KEV-listed), EPSS 94% exploitation pr
Windows Kernel contains a TOCTOU race condition vulnerability allowing local privilege escalation, exploited by the OilR
Windows Internet Shortcut Files (.url) contain an external control vulnerability (CVE-2025-33053, CVSS 8.8) that enables
Windows SMB contains an improper access control vulnerability (CVE-2025-33073, CVSS 8.8) enabling authenticated attacker
Twonky Server 8.5.2 on Linux and Windows allows unauthenticated access to the admin log file through a web service API b
An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote
FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbit
Serviio Media Server versions 1.4 through 1.8 on Windows contain an unauthenticated command injection in the /rest/actio
Same weakness CWE-502 – Deserialization of Untrusted Data
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today