PT-2025-38282 · Nvidia · Nvidia Triton Inference Server

Published 2025-09-16 · Updated 2025-09-18 · CVE-2025-23329

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server (affected versions not specified)

Description NVIDIA Triton Inference Server for Windows and Linux contains an issue where an attacker could cause memory corruption by identifying and accessing the shared memory region used by the Python backend. A successful exploit of this issue might lead to denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Access Control

Memory Corruption

Weakness Enumeration

CWE-284

CWE-787

Related Identifiers

BDU:2025-13798

CVE-2025-23329

Affected Products

Nvidia Triton Inference Server

References · 6

• https://bdu.fstec.ru/vul/2025-13798 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-23329 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5691 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-23329 · Vendor Advisory
• https://t.me/CVEtracker/32808 · Telegram Post
• https://twitter.com/CVEnew/status/1968561163534266419 · Twitter Post