PT-2025-38156 · Nvidia · Nvidia Triton Inference Server

CVE-2025-23328 · Published 2025-09-16 · Updated 2025-09-18

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Windows and Linux (affected versions not specified)

Description NVIDIA Triton Inference Server for Windows and Linux contains an issue where an attacker could cause an out-of-bounds write through a specially crafted input. A successful exploit of this issue might lead to denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-13796

CVE-2025-23328

Affected Products

Nvidia Triton Inference Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-23328 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5691 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-23328 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13796 · Security Note
• https://t.me/CVEtracker/32807 · Telegram Post
• https://twitter.com/CVEnew/status/1968561164775821636 · Twitter Post
• https://twitter.com/zoomeye_team/status/1968237164623503639 · Twitter Post