by Kastro
Paper/Archive/CVE-2025-23310

CVE-2025-23310

NVIDIA Triton Inference Server — NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause stack buffer overflow by spec…

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 79.5.795 × 2015.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause stack buffer overflow by specially crafted inputs. A successful exploit of this vulnerability might lead to remote code execution, denial of service, information disclosure, and data tampering.

Affected

ProductAffectedFixed inSource
Triton Inference ServerAll versions prior to 25.07–CNA

Scores by source

nvidia (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2025-23310refcve.org/CVERecord?id=CVE-2025-23310refnvidia.custhelp.com/app/answers/detail/a_id/5687