Out-of-bounds Write Vulnerability in NVIDIA Triton Inference Server for Windows and Linux

CVE-2025-23318

What is CVE-2025-23318?

The NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in its Python backend which allows an attacker to perform an out-of-bounds write. If successfully exploited, this flaw could lead to various serious consequences including unauthorized code execution, potential denial of service, data integrity issues, and unauthorized information exposure. It is crucial for users and organizations utilizing Triton Inference Server to apply necessary patches or mitigations to safeguard against these risks.

References