CVE-2025-23335 Integer overflow in Triton Inference Server
An attacker can cause a denial of service in NVIDIA Triton Inference Server via a specific model configuration and input triggering an underflow.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-23335?
CVE-2025-23335 is a medium-severity vulnerability in Nvidia Triton Inference Server, published on 6 Aug 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
NVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a vulnerability where an attacker could cause an underflow by a specific model configuration and a specific input. A successful exploit of this vulnerability might lead to denial of service.
Weakness: CWE-191
Which versions are affected by CVE-2025-23335?
It affects 1 product.
Products include Nvidia Triton Inference Server.
How do I fix CVE-2025-23335?
Apply the vendor's patch.
Is CVE-2025-23335 being exploited?
There is no known exploitation of CVE-2025-23335 in the wild and no public exploit code.
Other vulnerabilities in Nvidia Triton Inference Server
Sources
Also known as GHSA-r7f8-w95q-c4g4, MINI-c7qg-fc8v-jc55.