TensorRT-LLM Write-What-Where Vulnerability Enables Data Tampering
CVE-2026-47473 Published on July 14, 2026
NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure.
Vulnerability Analysis
CVE-2026-47473 can be exploited with local system access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
Write-what-where Condition
Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.
Affected Versions
NVIDIA TensorRT-LLM:- Before and including v1.3.0 rc16 is affected.