PT-2025-6422 · Nvidia · Nvidia Triton Inference Server

7Resp4Ss + 1 · Published 2024-11-23 · Updated 2025-09-22 · CVE-2024-53880

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server (affected versions not specified)

Description The issue is related to an integer overflow or wraparound error in the model loading API. This can be triggered by loading a model with an extra-large file size, potentially leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Integer Overflow

Weakness Enumeration

CWE-190

CWE-189

Related Identifiers

BDU:2025-02252

CVE-2024-53880

Affected Products

Nvidia Triton Inference Server

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2024-53880 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5612 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02252 · Security Note
• https://osv.dev/vulnerability/CVE-2024-53880 · Vendor Advisory
• https://twitter.com/bluepinksec/status/1889570386389434477 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1889519512782848228 · Twitter Post
• https://twitter.com/CVEnew/status/1889498759496953935 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2025021227 · Note
• https://t.me/cvedetector/17799 · Telegram Post
• https://t.me/cveNotify/136046 · Telegram Post
• https://vuldb.com/?id.295441 · Note