An out-of-bounds write vulnerability in NVIDIA TensorRT could allow an attacker to cause memory corruption and potentially lead to service disruption or code execution.

This flaw is an out-of-bounds write (CWE-787) that occurs during processing. The vulnerability is network-exploitable and does not require authentication or user interaction, making it highly attractive for automated exploitation.

With a CVSS score of 8.2, this vulnerability poses a high risk to business operations. An out-of-bounds write can lead to application crashes (Denial of Service) or, in certain configurations, allow an attacker to overwrite critical memory structures to achieve code execution, threatening the integrity of the host system.

Immediate Action: Upgrade to NVIDIA TensorRT version 10.16.1 or later to resolve the memory safety issue.

Proactive Monitoring: Review network traffic and application logs for malformed input patterns or unexpected service restarts that may indicate attempted exploitation.

Compensating Controls: Implement network-level filtering or a Web Application Firewall (WAF) to detect and block malformed requests directed at TensorRT-based services.

Public Exploit Available: No (exploit_available: false)

The high CVSS score and the lack of required authentication make this a critical update. Administrators must patch affected TensorRT instances immediately to prevent potential remote exploitation of the service.