EUVD-2026-94049
GHSA-4hxf-v5w4-4vm6
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Deserialization of a loaded model file: AV:L and UI:R because the victim must load the crafted artifact, PR:N as no prior auth is needed, with full C/I/A impact from code execution.
Primary rating from Vendor (nvidia).
CVSS VectorVendor: nvidia
Lifecycle Timeline
2DescriptionCVE.org
NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
AnalysisAI
Deserialization of untrusted data in NVIDIA Model-Optimizer (CVSS 3.1 base score 7.8) allows an attacker who supplies a crafted model artifact to achieve code execution, data tampering, denial of service, and information disclosure on the machine that loads it. The assessed vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) shows the severity comes from full loss of confidentiality and integrity once the payload runs, but the attacker must first get the victim to open or deserialize the malicious artifact in a local processing environment, so there is no remote, zero-interaction path. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the victim to load or deserialize an attacker-supplied model artifact using NVIDIA Model-Optimizer - the UI:R metric confirms this mandatory user action, and AV:L confirms the malicious file must reach the local processing environment. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a credible but not emergency-level priority. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch has been identified at time of analysis, so the immediate action is to reconcile the installed Model-Optimizer version against the NVIDIA Product Security advisory (https://github.com/NVIDIA/product-security/tree/main/2026/5903) and upgrade to the fixed release as soon as NVIDIA publishes it; track the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-65142) for updates. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all systems and pipelines using NVIDIA Model-Optimizer and restrict the loading of model artifacts to trusted sources only; implement file scanning or allowlisting for model files. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execut
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addres
The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary c
The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not
NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially craft
Authentication bypass in NVIDIA Triton Inference Server allows unauthenticated remote attackers to reach protected funct
NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially craft
NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default co
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before G
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ
The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privi
NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with de
Same weakness CWE-502 – Deserialization of Untrusted Data
View allShare
External POC / Exploit Code
Leaving vuln.today