CVE-2025-33255

Published: May 20, 2026Modified: Jul 24, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.

Affected (1)

Products: Nvidia: Tensorrt Llm

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nvidia Tensorrt Llm	Before 1.2

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-33255

Source: psirt@nvidia.com

Third Party AdvisoryUS Government Resource

https://nvidia.custhelp.com/app/answers/detail/a_id/5805

Source: psirt@nvidia.com

Vendor Advisory

https://www.cve.org/CVERecord?id=CVE-2025-33255

Source: psirt@nvidia.com

Third Party AdvisoryVDB Entry

Timeline

No history available yet.