PT-2026-27508 · Nvidia · Model Optimizer

CVE-2026-24141 · Published 2026-03-23 · Updated 2026-03-24

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Model Optimizer (affected versions not specified)

Description A flaw exists in the ONNX quantization feature of the NVIDIA Model Optimizer for Windows and Linux. The issue occurs when the software performs unsafe deserialization while processing a specially crafted input file, leading to the restoration of untrusted data in memory. This could allow an attacker to execute arbitrary code, escalate privileges, tamper with data, or gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2026-08801

CVE-2026-24141

Affected Products

Model Optimizer

References · 4

• https://cve.org/CVERecord?id=CVE-2026-24141 · Security Note
• https://bdu.fstec.ru/vul/2026-08801 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-24141 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5798 · Note