PatchTheCVEtensorrt vulnerabilities and fixes
Recent CVEs affecting tensorrt, with upgrade or downgrade steps. 4 tracked.
tensorrt has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-07-14. Highest priority: CVE-2026-24227 (score 39/100).
- CVE-2026-24227 MEDIUM 5.3 UPGRADE NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data
- CVE-2026-24238 HIGH 7.8 UPGRADE NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array ind
- CVE-2026-24268 HIGH 7.8 UPGRADE NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow
- CVE-2026-24272 HIGH 7.8 UPGRADE NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer
FAQ
How do I fix tensorrt vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tensorrt being exploited right now?
None of the tracked tensorrt CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tensorrt CVE should I patch first?
CVE-2026-24227 currently ranks highest (39/100): NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data.