CVE-2025-23317

CWE-122 — Heap-based Buffer Overflow3 documents3 sources

Severity

9.8CRITICAL

EPSS

3.3%

top 12.71%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Nvidia Triton Inference Server

Timeline

PublishedAug 6

Description

NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shell by sending a specially crafted HTTP request. A successful exploit of this vulnerability might lead to remote code execution, denial of service, data tampering, or information disclosure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HExploitability: 3.9 | Impact: 5.2

Affected Packages2 packages

▶NVDnvidia/triton_inference_server< 25.07

▶CVEListV5nvidia/triton_inference_serverAll versions prior to 25.07

🔴Vulnerability Details

GHSA

GHSA-3qrv-qff5-f7w7: NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shell by sending a specially craft↗2025-08-06

▶

CVEList

CVE-2025-23317: NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shell by sending a specially craft↗2025-08-06

▶