NVIDIA TensorRT contains a vulnerability classified as CWE-129 (Improper Validation of Array Index) that may allow an attacker to cause improper array index validation. Successful exploitation could lead to high-impact consequences including code execution, confidentiality, integrity, and availability compromise. The CVSS 3.1 base score is 7.8, reflecting a high severity with local attack vector, low attack complexity, no privileges required, but user interaction needed. No vendor advisory or patch information is currently provided, and the affected versions are not specified.

If exploited, this vulnerability could allow an attacker to execute arbitrary code on the affected system, resulting in full compromise of confidentiality, integrity, and availability of the system running NVIDIA TensorRT. The attack requires local access and user interaction but no privileges, making it a significant risk in environments where local users can be tricked into interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and avoid untrusted user interactions with the affected software.