CVE-2026-24255
High · 7.5CVSS
7.5
EPSS
0.5%
Published
Aug 4, 2026
CISA due date
—
The record
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tampering.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121564 Incomplete Comparison with Missing Factors (CWE-1023) in merge_chats()… CWE-1023
- CVE-2026-91768 The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a… CWE-1023
- CVE-2026-81376 Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized… CWE-1023
- CVE-2026-54713 CakePHP Queue is a queue-interop compatible queueing library. CWE-1023
- CVE-2026-53859 OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers… CWE-1023
- CVE-2026-53839 OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint… CWE-1023
- CVE-2026-7473 On affected platforms running Arista EOS where a tunnel decapsulation configuration—such… CWE-1023
- CVE-2026-48587 An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. CWE-1023