CVE-2026-24272 is a heap-based buffer overflow vulnerability in NVIDIA TensorRT. An attacker with local access and the ability to interact with the application could trigger a heap overflow, potentially leading to arbitrary code execution. The vulnerability is classified under CWE-122. The CVSS 3.1 vector indicates low attack complexity, no privileges required, but user interaction is needed. Confidentiality, integrity, and availability impacts are all rated high. No vendor advisory or patch information is currently available to confirm remediation status.

Successful exploitation could allow an attacker to execute arbitrary code on the affected system, compromising confidentiality, integrity, and availability of the system running NVIDIA TensorRT. The attack requires local access and user interaction, limiting remote exploitation. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, limit access to systems running NVIDIA TensorRT and avoid untrusted user interactions that could trigger the vulnerability.