PT-2025-31923 · Nvidia · Nvidia Triton Inference Server

Will Vandevanter · Published 2025-08-04 · Updated 2025-10-08 · CVE-2025-23310

Positive Technologies · (AI Summary)

CVSS v2.0

10

Critical

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server versions (affected versions not specified)

Description NVIDIA Triton Inference Server for Windows and Linux has an issue where a specially crafted input can cause a stack buffer overflow. Successful exploitation may lead to remote code execution, denial of service, information disclosure, and data tampering. The vulnerable component is susceptible to manipulation through crafted inputs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

DoS

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-09743

CVE-2025-23310

Affected Products

Nvidia Triton Inference Server

References · 13

• https://nvidia.custhelp.com/app/answers/detail/a_id/5687 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-23310 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-23310 · Security Note
• https://bdu.fstec.ru/vul/2025-09743 · Security Note
• https://osv.dev/vulnerability/CVE-2025-23310 · Vendor Advisory
• https://twitter.com/trailofbits/status/1975922904857514057 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1mkr5zs/top_10_trending_cves_08082025 · Reddit Post
• https://t.me/poxek/5418 · Telegram Post
• https://t.me/cveNotify/131064 · Telegram Post
• https://twitter.com/HunterMapping/status/1953001034499903682 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1mj0l93/top_10_trending_cves_06082025 · Reddit Post
• https://t.me/CVEtracker/29335 · Telegram Post
• https://twitter.com/trailofbits/status/1952694252338544804 · Twitter Post