CVE-2026-24232CWE-502

NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data

Medium · published July 21, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
30.6
In the wild
Unconfirmed
What it is

NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.6th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-07-21T16:07Z
EPSS history
Timeline
  • 21 JUL 16:07Z
    NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data
    cvelistv5