CVE-2025-33211CWE-1284

CVE-2025-33211

High · published December 4, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
51.8
In the wild
Unconfirmed
What it is

⚡ A sneaky validation flaw in NVIDIA Triton Server could bring your service to a grinding halt! 🚨 Think of it as a restaurant that fails to check how many diners are at each table — if too many orders come in for one table, the kitchen gets overwhelmed. That’s what this vulnerability does to your server! An attacker could exploit this flaw to generate excessive input requests, leading to a denial of service. This could leave your server unresponsive, cutting off access for legitimate users and potentially crippling critical operations!

Put simply

Think of it as a restaurant that fails to check how many diners are at each table — if too many orders come in for one table, the kitchen gets overwhelmed. That’s what this vulnerability does to your server! This vulnerability stems from improper validation of input quantities, allowing attackers to potentially overwhelm the server and disrupt its normal functioning.

What to do

An attacker could exploit this flaw to generate excessive input requests, leading to a denial of service. This could leave your server unresponsive, cutting off access for legitimate users and potentially crippling critical operations! To mitigate this risk, ensure you're running the latest version of NVIDIA Triton Server and closely monitor your input validation mechanisms. Regularly audit server requests to spot anomalies before they escalate into a service interruption. You've got this! With vigilance and timely updates, you can keep your server safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00680 · 51.8th percentile
Weakness
CWE-1284 · Improper Validation of Specified Quantity in Input
Published
2025-12-04T00:15Z
Affected products (1)
ProductVersionsFixed in
nvidia/triton_inference_server< 25.1025.10
References (3)
EPSS history
Timeline
  • 03 DEC 18:16Z
    NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified quantity in input
    cvelistv5