BaseFortify

Publication date: 2025-12-03

Last updated on: 2025-12-05

Assigner: NVIDIA Corporation

Description

NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified quantity in input. A successful exploit of this vulnerability may lead to denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-03

Last Modified

2025-12-05

Generated

2026-07-06

AI Q&A

2025-12-03

EPSS Evaluated

2026-07-05

NVD

CVE-2025-33211

EUVD

EUVD-2025-201087

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	triton_inference_server	to 25.10 (exc)
linux	linux_kernel	From 5.15.160 (inc) to 5.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1284	The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Attack-Flow Graph

Executive Summary

This vulnerability in NVIDIA Triton Server for Linux involves improper validation of the specified quantity in input, which an attacker can exploit to cause a denial of service.

Impact Analysis

The vulnerability can lead to a denial of service, meaning the affected server or service may become unavailable or unresponsive due to an attack exploiting improper input validation.

Hi! I’m here to help you understand CVE-2025-33211. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70