CVE-2025-23319
06.08.2025, 13:15
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write by sending a request. A successful exploit of this vulnerability might lead to remote code execution, denial of service, data tampering, or information disclosure.Enginsight
| Vendor | Product | Version |
|---|---|---|
| nvidia | triton_inference_server | 𝑥 < 25.07 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-805 - Buffer Access with Incorrect Length ValueThe software uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.