PT-2026-42096 · Nvidia · Triton Inference Server

Published 2026-05-20 · Updated 2026-05-20 · CVE-2026-24213

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server (affected versions not specified)

Description A flaw exists in the DALI backend that allows an attacker to trigger an out-of-bounds read, which occurs when a program reads data past the end of the intended buffer. This could potentially lead to code execution, data tampering, denial of service, or information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-24213

Affected Products

Triton Inference Server

References · 4

• https://nvidia.custhelp.com/app/answers/detail/a_id/5828 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-24213 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-24213 · Security Note
• https://twitter.com/CVEnew/status/2056994198377918528 · Twitter Post