CVE-2026-24158

Published: Mar 24, 2026Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker may cause a denial of service by providing a large compressed payload. A successful exploit of this vulnerability may lead to denial of service.

Affected (1)

Products: Nvidia: Triton Inference Server

Nvidia

1 product

Triton Inference Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nvidia Triton Inference Server	Before 26.01

Related CWEs

CWE-789

Memory Allocation with Excessive Size Value

The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-24158

Source: psirt@nvidia.com

Third Party AdvisoryUS Government Resource

https://nvidia.custhelp.com/app/answers/detail/a_id/5790

Source: psirt@nvidia.com

Vendor Advisory

https://www.cve.org/CVERecord?id=CVE-2026-24158

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.