Out-of-bounds Write

Overview nvidia-pytriton is a PyTriton - Flask/FastAPI-like interface to simplify Triton's deployment in Python environments. Affected versions of this package are vulnerable to Out-of-bounds Write via the HTTP and Sagemaker request handler. An attacker could cause an out-of-bounds write through ...

Access Control Bypass

Overview nvidia-pytriton is a PyTriton - Flask/FastAPI-like interface to simplify Triton's deployment in Python environments. Affected versions of this package are vulnerable to Access Control Bypass via SharedMemoryManager::RegisterSystemSharedMemory. An attacker could cause memory corruption by...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2025-23329 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.7.0 Source cves: CVE-2025-23329 Source advisory:...

CVE-2025-23337

NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller HMC that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service,...

CVE-2025-23337

The CVE-2025-23337 issue affects NVIDIA HGX & DGX GB200, GB300, B300, involving the HGX Management Controller (HMC). A malicious actor with administrative access on the BMC may access the HMC as an administrator, potentially enabling code execution, denial of service, privilege escalation, inform...

CVE-2025-23316

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause a remote code execution by manipulating the model name parameter in the model control APIs. A successful exploit of this vulnerability might lead to remote code...

CVE-2025-23316

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause a remote code execution by manipulating the model name parameter in the model control APIs. A successful exploit of this vulnerability might lead to remote code...

CVE-2025-23329

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause memory corruption by identifying and accessing the shared memory region used by the Python backend. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23268

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an improper input validation issue. A successful exploit of this vulnerability may lead to code execution...

CVE-2025-23329

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause memory corruption by identifying and accessing the shared memory region used by the Python backend. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23328

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23328

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23268

CVE-2025-23268 affects NVIDIA Triton Inference Server, specifically a vulnerability in the DALI backend related to improper input validation that could lead to code execution. Affected component: DALI backend within Triton; vulnerable behavior stems from input handling in that backend. The NVIDIA...

CVE-2025-23268

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an improper input validation issue. A successful exploit of this vulnerability may lead to code execution...

CVE-2025-23268

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an improper input validation issue. A successful exploit of this vulnerability may lead to code execution...

CVE-2025-23336

CVE-2025-23336 affects NVIDIA Triton Inference Server for Windows and Linux. The described vulnerability is a denial-of-service condition triggered by loading a misconfigured model. The NVIDIA security bulletin lists CVE-2025-23336 as addressed by an updated release (25.08) and notes affected ver...

CVE-2025-23329

Summary of CVE-2025-23329 : NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend that could allow memory corruption by identifying and accessing the shared memory region used by that backend. A successful exploit may lead to denial of service. The is...

CVE-2025-23328

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23328

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23328

NVIDIA Triton Inference Server for Windows and Linux is affected by CVE-2025-23328: an attacker could trigger an out-of-bounds write via a specially crafted input, potentially leading to denial of service. The vulnerability is documented across multiple sources (NVD/NVIDIA security bulletin and R...