← Back

CVE-2026-24255

nvd nist
Published: Aug 4, 2026Modified: Aug 7, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: psirt@nvidia.com (Secondary)

Description

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tampering.

Affected (1)

Products: Nvidia: Dynamo
Nvidia
1 product
Dynamo
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dynamo
Up to 1.1.0
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-1023
Incomplete Comparison with Missing Factors
The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.

References (3)

Source: psirt@nvidia.com
Product
Source: psirt@nvidia.com
Third Party AdvisoryUS Government Resource
Source: psirt@nvidia.com
Third Party Advisory

Timeline

No history available yet.