NVIDIA Triton Inference Server on Windows/Linux Python Backend buffer access with incorrect length value

Summaryinfo

A vulnerability categorized as critical has been discovered in NVIDIA Triton Inference Server on Windows/Linux. The impacted element is an unknown function of the component Python Backend. Such manipulation leads to buffer access with incorrect length value. This vulnerability is referenced as CVE-2025-23319. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability was found in NVIDIA Triton Inference Server on Windows/Linux (affected version unknown). It has been rated as critical. Affected by this issue is an unknown functionality of the component Python Backend. The manipulation with an unknown input leads to a buffer access with incorrect length value vulnerability. Using CWE to declare the problem leads to CWE-805. The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer. Impacted is confidentiality, integrity, and availability. CVE summarizes:

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write by sending a request. A successful exploit of this vulnerability might lead to remote code execution, denial of service, data tampering, or information disclosure.

This vulnerability is handled as CVE-2025-23319 since 01/14/2025. The exploitation is known to be difficult. The attack may be launched remotely. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 08/06/2025).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• NVIDIA

Name

• Triton Inference Server

License

• commercial

Website

• Vendor: https://www.nvidia.com/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion