by Kastro
Paper/Archive/CVE-2025-23311

CVE-2025-23311

NVIDIA Triton Inference Server — NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP req…

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 86.0.860 × 2017.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP requests. A successful exploit of this vulnerability might lead to remote code execution, denial of service, information disclosure, or data tampering.

Affected

ProductAffectedFixed inSource
Triton Inference ServerAll versions prior to 25.07–CNA

Scores by source

nvidia (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refnvd.nist.gov/vuln/detail/CVE-2025-23311refcve.org/CVERecord?id=CVE-2025-23311refnvidia.custhelp.com/app/answers/detail/a_id/5687