NVIDIA TensorRT-LLM Deserialization Vulnerability Leading to Code Execution

A deserialization vulnerability has been identified in NVIDIA TensorRT-LLM, affecting all platforms and versions prior to 1.2. This vulnerability involves unsafe handling of serialized data, which could be exploited to execute arbitrary code, tamper with data, or disclose sensitive information.

Impact

Exploitation of this vulnerability could result in unauthorized code execution, data manipulation, and leakage of confidential information.