CVE-2025-23318

HIGH

NVIDIA Triton Inference Server < 25.07 - Out-of-Bounds Write in Python Backend

Title source: llm

Description

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.

References (3)

Core 3

Core References

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2025-23318

Vendor Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/5687

Third Party Advisory

https://www.cve.org/CVERecord?id=CVE-2025-23318

Scores

CVSS v3 8.1

EPSS 0.0034

EPSS Percentile 56.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-805 CWE-787

Status published

Products (1)

nvidia/triton_inference_server < 25.07

Published Aug 06, 2025

Tracked Since Feb 18, 2026