CVE-2025-23331

Published: Aug 6, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocation with excessive size value, leading to a segmentation fault, by providing an invalid request. A successful exploit of this vulnerability might lead to denial of service.

Affected (1)

Products: Nvidia: Triton Inference Server

1 product

Triton Inference Server

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Nvidia Triton Inference Server	Before 25.06

Running on/with	Platform Versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

Memory Allocation with Excessive Size Value

The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-23331

Source: psirt@nvidia.com

Third Party Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/5687

Source: psirt@nvidia.com

Vendor Advisory

https://www.cve.org/CVERecord?id=CVE-2025-23331

Source: psirt@nvidia.com

US Government Resource

Timeline

No history available yet.