CVE-2025-23310CWE-121

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause stack buffer overflow by specially crafted inputs

Critical · published August 6, 2025

CVSS v3.1
9.8
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

🔥 A stack buffer overflow in NVIDIA Triton Inference Server could let attackers remotely execute code with just one specially crafted input! This is like a chef adding one wrong ingredient to a recipe, causing the entire dish to explode in the kitchen. Just a small mistake can lead to major chaos! If exploited, this vulnerability could allow an attacker to seize control of the server, disrupt services, divulge sensitive information, or even manipulate your precious data. The potential fallout is absolutely devastating!

Put simply

This is like a chef adding one wrong ingredient to a recipe, causing the entire dish to explode in the kitchen. Just a small mistake can lead to major chaos! CVE-2025-23310 allows attackers to cause a stack buffer overflow by injecting crafted inputs into the NVIDIA Triton Inference Server, leading to possible remote code execution and data tampering.

What to do

If exploited, this vulnerability could allow an attacker to seize control of the server, disrupt services, divulge sensitive information, or even manipulate your precious data. The potential fallout is absolutely devastating! Immediately patch to the latest version of NVIDIA Triton Inference Server to mitigate this risk. Review your input validation processes to ensure they are robust against such attacks. You've got this! Follow these steps, and you'll have your defenses locked down tight! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01848 · 78.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-08-06T12:18Z
EPSS history
Timeline
  • 06 AUG 12:18Z
    NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause stack buffer overflow by specially crafted inputs
    cvelistv5