AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

NvidiaCVE-2026-24232

Nvidia Tranformers4Rec: unsafe deserialization

Nvidia

CVE-2026-24232 · Published Jul 21, 2026

Medium4.3
No fix yet
Nvidia advisory

NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

Affected versions

PackageAffectedFixed in
Tranformers4Rec
Product
<= 0 < 41b14d7No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-502

More Nvidia advisories

All Nvidia
High 7.8Jul 27Nvidia NeMo Framework: command injectionCVE-2026-24252no fix yetMedium 6.2Jul 14Nvidia TensorRT-LLM: denial of serviceCVE-2026-47470no fix yetHigh 7.5Jul 14Nvidia TensorRT-LLM: unsafe deserializationCVE-2026-47471no fix yetHigh 7.8Jul 14Nvidia TensorRT-LLM: unsafe deserializationCVE-2026-47472no fix yetHigh 7.4Jul 14Nvidia TensorRT-LLM: tamperingCVE-2026-47473no fix yetMedium 6.2Jul 14Nvidia TensorRT-LLM: denial of serviceCVE-2026-47475no fix yet