Deepstream
Monthly
Integer overflow in NVIDIA DeepStream is reachable when crafted tensor dimensions are supplied in a YAML configuration file loaded by the inference pipeline, enabling an authenticated local attacker to cause denial of service, information disclosure, and data tampering. Exploitation requires local access and the ability to modify or supply the DeepStream pipeline YAML, consistent with the CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N, so deployments that only load trusted operator-authored configurations are not exposed. No public exploit code or confirmed active exploitation (CISA KEV) was identified in the provided intelligence at time of analysis.
Integer overflow in NVIDIA DeepStream is reachable when crafted tensor dimensions are supplied in a YAML configuration file loaded by the inference pipeline, enabling an authenticated local attacker to cause denial of service, information disclosure, and data tampering. Exploitation requires local access and the ability to modify or supply the DeepStream pipeline YAML, consistent with the CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N, so deployments that only load trusted operator-authored configurations are not exposed. No public exploit code or confirmed active exploitation (CISA KEV) was identified in the provided intelligence at time of analysis.