NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write by sending a request. A successful exploit of this vulnerability might lead to remote code execution, denial of service, data tampering, or information disclosure.
The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.
The product writes data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://nvd.nist.gov/vuln/detail/CVE-2025-23319 | us government resource |
| https://www.cve.org/CVERecord?id=CVE-2025-23319 | third party advisory |
| https://nvidia.custhelp.com/app/answers/detail/a_id/5687 | vendor advisory |