51 matches found
CVE-2026-24213
The CVE-2026-24213 entry concerns NVIDIA Triton Inference Server’s DALI backend, where an out-of-bounds read is possible due to a vulnerability in that backend. Affected component: DALI backend within Triton Inference Server. Reported impacts include code execution, data tampering, denial of serv...
CVE-2024-0100
Affected software: NVIDIA Triton Inference Server for Linux. Vulnerability: tracing API allows a user to corrupt system files, as described in CVE-2024-0100. Impact: potential denial of service and data tampering (per the CVE entry and NVIDIA bulletin). Root cause / vector: not elaborated beyond ...
CVE-2024-0088
CVE-2024-0088 affects the NVIDIA Triton Inference Server for Linux. The vulnerability resides in shared memory APIs, where a user can trigger an improper memory access via a network API, with potential consequences described as denial of service and data tampering. The NVIDIA security bulletin in...
CVE-2024-53880
The CVE-2024-53880 entry pertains to NVIDIA Triton Inference Server. A vulnerability in the model loading API can trigger an integer overflow/wraparound when loading a model with an extra-large file size, overflow an internal variable, and potentially cause a denial of service. Exploitation detai...
CVE-2024-0087
CVE-2024-0087 refers to a vulnerability in NVIDIA Triton Inference Server for Linux where a user can set the logging location to an arbitrary file; if that file exists, logs are appended to it. This can lead to code execution, denial of service, privilege escalation, information disclosure, and d...
CVE-2023-31036
NVIDIA Triton Inference Server (Linux/Windows) is affected when started with the non-default --model-control explicit option. The model load API can trigger relative path traversal in this mode, potentially enabling code execution, DoS, privilege escalation, information disclosure, and data tampe...
CVE-2026-24215
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend that could allow an attacker to cause uncontrolled resource consumption, potentially leading to denial of service. Affected: Triton Inference Server (DALI backend). CVSS from NVIDIA security bulletin shows CVSSv3.1 5.7 (M...
CVE-2024-0095
CVE-2024-0095 affects NVIDIA Triton Inference Server for Linux and Windows. The issue allows a user to inject forged logs and executable commands by inserting arbitrary data as a new log entry, with potential consequences including code execution, denial of service, privilege escalation, informat...
CVE-2024-0103
Summary of CVE-2024-0103 (NVIDIA Triton Inference Server for Linux) : The vulnerability allows a user to cause an incorrect Initialization of a resource due to a network issue, potentially leading to information disclosure. Affected product is NVIDIA Triton Inference Server for Linux. The issue’s...
CVE-2024-0116
Summary: NVIDIA Triton Inference Server contains an out-of-bounds read vulnerability triggered when releasing a shared memory region still in use, potentially causing denial of service. Affected product: NVIDIA Triton Inference Server (Linux platforms; versions prior to 24.09 per NVIDIA Security ...
CVE-2025-23310
CVE-2025-23310 affects NVIDIA Triton Inference Server for Windows and Linux. The issue is a stack buffer overflow triggered by specially crafted inputs in the server, with potential to cause remote code execution, denial of service, information disclosure, and data tampering. The NVIDIA security ...
CVE-2026-24208
NVIDIA Triton Inference Server is affected by CVE-2026-24208, a path traversal vulnerability that could lead to denial of service. NVIDIA’s security bulletin indicates the applicable mitigation is to update to Triton Server r26.03 or later (Linux; all platforms) via the Triton Inference Server Gi...
CVE-2025-23322
Summary: CVE-2025-23322 affects NVIDIA Triton Inference Server for Windows and Linux. The issue is a double-free condition caused when a stream is cancelled before processing, potentially enabling a denial-of-service. Root cause / vulnerable component: cancellation handling in the server’s stream...
CVE-2025-23317
CVE-2025-23317 affects NVIDIA Triton Inference Server with a vulnerability in the HTTP server that could allow an attacker to start a reverse shell via a specially crafted HTTP request, potentially enabling remote code execution, denial of service, data tampering, or information disclosure. The c...
CVE-2025-23319
CVE-2025-23319 affects NVIDIA Triton Inference Server for Windows and Linux, specifically the Python backend. The vulnerability is an out-of-bounds write to memory buffer data that can be triggered by a crafted HTTP request. Successful exploitation could allow remote code execution, denial of ser...
CVE-2025-23320
CVE-2025-23320 affects the NVIDIA Triton Inference Server for Windows and Linux, with a vulnerability in the Python backend that could let an attacker send a very large request to exceed the shared memory limit and potentially disclose information. Affected component: Python backend processing of...
CVE-2025-23328
NVIDIA Triton Inference Server for Windows and Linux is affected by CVE-2025-23328: an attacker could trigger an out-of-bounds write via a specially crafted input, potentially leading to denial of service. The vulnerability is documented across multiple sources (NVD/NVIDIA security bulletin and R...
CVE-2025-23311
NVIDIA Triton Inference Server is affected by CVE-2025-23311, a stack overflow via specially crafted HTTP requests. The Red Hat/RH/CVE entry and NVIDIA advisory confirm the vulnerability in Triton Inference Server and indicate the impact could include remote code execution, denial of service, inf...
CVE-2025-23318
CVE-2025-23318 affects NVIDIA Triton Inference Server for Windows and Linux, with a vulnerability in the Python backend that could cause an out-of-bounds write, potentially enabling code execution, denial of service, data tampering, or information disclosure. The Red Hat advisory and NVIDIA secur...
CVE-2026-24210
CVE-2026-24210 affects NVIDIA Triton Inference Server . The vulnerability is an integer overflow in the Triton components, with the NVIDIA security release noting that a successful exploit could lead to a Denial of Service. The issue is addressed by updating to Triton Server r26.03 or later; affe...
CVE-2025-23331
Summary: CVE-2025-23331 affects NVIDIA Triton Inference Server for Windows and Linux. A malicious or invalid request can trigger a memory allocation with an excessively large size, causing a segmentation fault and potentially leading to a denial of service. The vulnerability is documented across ...
CVE-2025-23316
CVE-2025-23316 concerns the NVIDIA Triton Inference Server (Windows and Linux) where the Python backend vulnerability allows remote code execution by manipulating the model name in model control APIs. The issue can also lead to denial of service, information disclosure, and data tampering. Public...
CVE-2025-23324
NVIDIA Triton Inference Server for Windows and Linux is affected by CVE-2025-23324, where an invalid request could trigger an integer overflow/wraparound, causing a segmentation fault and potentially denial of service. The issue is documented across multiple sources (CVE entry and vendor bulletin...
CVE-2025-23323
CVE-2025-23323 affects NVIDIA Triton Inference Server for Windows and Linux. The vulnerability is an integer overflow/wraparound when processing invalid requests, which can cause a segmentation fault and may lead to a denial of service. Public sources consistently describe the issue without detai...
CVE-2025-23326
CVE-2025-23326 affects NVIDIA Triton Inference Server for Windows and Linux. The issue is an integer overflow triggered by specially crafted input, with potential denial of service. Red Hat and NVIDIA entries confirm the vulnerability description. NVIDIA’s security bulletin indicates a remediatio...
CVE-2025-23333
CVE-2025-23333 is acknowledged in NVIDIA’s security bulletin as a vulnerability in the Python backend of the Triton Inference Server for Windows and Linux. The issue allows an attacker to perform an out-of-bounds read by manipulating shared memory data, with information disclosure as the stated i...
CVE-2025-23334
CVE-2025-23334 concerns NVIDIA Triton Inference Server (Windows/Linux) with a Python backend flaw that allows an attacker to trigger an out-of-bounds read via a request, potentially leading to information disclosure. Connected advisories/records confirm this is a real vulnerability affecting Trit...
CVE-2026-24209
NVIDIA Triton Inference Server contains a path traversal vulnerability (CVE-2026-24209). The issue, exploitable over the network with low complexity and no privileges, can lead to denial of service. NVIDIA’s security bulletin credits the affected product and specifies that updating to Triton Serv...
CVE-2025-23268
CVE-2025-23268 affects NVIDIA Triton Inference Server, specifically a vulnerability in the DALI backend related to improper input validation that could lead to code execution. Affected component: DALI backend within Triton; vulnerable behavior stems from input handling in that backend. The NVIDIA...
CVE-2025-23335
CVE-2025-23335 affects NVIDIA Triton Inference Server for Windows and Linux and the TensorRT backend. The vulnerability enables an underflow to be triggered by a particular model configuration and input, with the documented impact being denial of service. Public advisories in connected documents ...
CVE-2025-23336
CVE-2025-23336 affects NVIDIA Triton Inference Server for Windows and Linux. The described vulnerability is a denial-of-service condition triggered by loading a misconfigured model. The NVIDIA security bulletin lists CVE-2025-23336 as addressed by an updated release (25.08) and notes affected ver...
CVE-2025-33201
CVE-2025-33201 – NVIDIA Triton Inference Server is affected. The issue is an improper check for unusual or exceptional conditions triggered by oversized payloads in the HTTP server, which can allow an attacker to cause a denial of service. The vulnerability is associated with the Triton Inference...
CVE-2025-23325
CVE-2025-23325 affects NVIDIA Triton Inference Server for Windows and Linux. The vulnerability is an attacker-caused uncontrolled recursion via crafted input, with a stated potential impact of denial of service. The entry lists a CVSS v3.1 base score of 7.5 (High) with network attack vector and n...
CVE-2025-23329
Summary of CVE-2025-23329 : NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend that could allow memory corruption by identifying and accessing the shared memory region used by that backend. A successful exploit may lead to denial of service. The is...
CVE-2026-24206
CVE-2026-24206 affects NVIDIA Triton Inference Server. The vulnerability enables an authentication bypass in the server, with potential outcomes including escalation of privileges, denial of service, and information disclosure. NVIDIA’s security bulletin and accompanying pages indicate the issue ...
CVE-2026-24207
NVIDIA Triton Inference Server is affected by CVE-2026-24207. The vulnerability concerns authentication bypass in the Triton Inference Server, with potential to lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure. The NVIDIA security bull...
CVE-2025-23327
CVE-2025-23327 affects NVIDIA Triton Inference Server for Windows and Linux. The vulnerability is an integer overflow triggered by specially crafted inputs, with the potential impact of denial of service and data tampering as described in the CVE description. Public advisories reference NVIDIA’s ...
CVE-2026-24147
CVE-2026-24147 affects NVIDIA Triton Inference Server. A vulnerability in the triton server allows information disclosure by uploading a model configuration, with potential information disclosure or denial of service. Affected product: Triton Inference Server; root cause: insufficient input handl...
CVE-2026-24214
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could trigger an integer overflow. Affected component: DALI backend within Triton. Likely impact: code execution, data tampering, and denial of service. Root cause: integer overflow in the DALI path. Mit...
CVE-2026-24146
CVE-2026-24146 affects NVIDIA Triton Inference Server. The vulnerability arises from insufficient input validation and a large number of outputs, which can cause the server to crash and potentially lead to a denial of service. Documented impact is DoS; exploitation status is not detailed in the p...
CVE-2026-24264
CVE-2026-24264 affects NVIDIA Triton Inference Server for Linux. The security bulletin documents that an attacker can cause improper handling of highly compressed data, with the impact being denial of service . The vulnerability is addressed by updating to Triton Server r26.04 or later . Affected...
CVE-2026-24266
CVE-2026-24266 affects NVIDIA’s Triton Inference Server for Linux. The issue is a use-after-free vulnerability in the server (specific component not detailed in the provided documents) that can lead to a denial of service if exploited. NVIDIA’s security bulletin specifies affected versions are 0....
CVE-2025-23321
CVE-2025-23321 affects NVIDIA Triton Inference Server for Windows and Linux. The vulnerability involves a divide-by-zero condition triggered by an invalid/malformed request, with the documented impact being denial of service. The Red Hat/NVD entries confirm the same issue and describe it as a ser...
CVE-2025-33211
Summary (CVE-2025-33211) NVIDIA Triton Server for Linux is affected via the nvidia-pytriton package, where the EVBufferToJson path in the HTTP server can be triggered by an oversized JSON payload, causing the server to terminate with a std::length_error. The publicly documented details specify th...
CVE-2026-24174
NVIDIA’s CVE-2026-24174 affects the Triton Inference Server. A malformed request can cause the server to crash, potentially resulting in a denial of service. CVSSv3.1 vectors indicate Network access, Low attack complexity, No privileges required, and a High impact on availability (base score 7.5)...
CVE-2026-24175
CVE-2026-24175 affects NVIDIA Triton Inference Server. A malformed request header can crash the server, resulting in a denial of service (attack vector: network; complexity: low; privileges: none). NVIDIA’s security bulletin recommends upgrading to Triton Server r26.02 or later to address the vul...
CVE-2026-24158
CVE-2026-24158 is documented in NVIDIA’s March 2026 Security Bulletin for the NVIDIA TRT (Triton Inference Server). The vulnerability exists in the HTTP endpoint where a large compressed payload can be used to cause a denial of service. The issue is addressed in Triton Inference Server updates, w...
CVE-2025-33202
NVIDIA Triton Inference Server (Linux/Windows) is affected by CVE-2025-33202, a stack overflow triggered by extra-large payloads that can lead to denial of service. Public docs detail a network-exploitable flaw (CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with base score 6.5. NVIDIA’s advisor...
CVE-2025-33238
Summary: CVE-2025-33238 affects NVIDIA Triton Inference Server. The connected document details that the JSON-based HTTP endpoint (Sagemaker HTTP server) can trigger an exception, potentially leading to a denial of service. The risk is described with a CVSS-like vector and a base score of 7.5 (Hig...
CVE-2025-33254
CVE-2025-33254 is addressed by NVIDIA for Triton Inference Server. The NVIDIA security bulletin states this vulnerability could cause internal state corruption, potentially leading to a denial of service. Affected: Triton Inference Server on all platforms/versions prior to 26.01. Mitigation: upda...