ZDI 2026-08-24

ZDI-26-591: NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2026-24272

Machine-generated analysis · WAYSCloud LLM

TensorRT's ONNX parser has a heap-based buffer overflow that can be triggered by a crafted ONNX file.

Context

The advisory concerns NVIDIA TensorRT. It describes a heap-based buffer overflow in the ONNX file parsing code that enables remote code execution when a user opens a malicious file or visits a malicious page. Exploitation requires user interaction.

Operator considerations

Check: Verify the installed TensorRT version and ONNX parser revision.
Isolate: Process untrusted ONNX files only in a sandboxed or isolated environment.
Log: Enable logging of ONNX parsing errors and failures.

From Zero Day Initiative ↗

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA TensorRT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24272.

Read the full advisory on ZDI →