CVE-2026-24213
NVIDIA Triton Inference Server Out-of-Bounds Read Vulnerability
Publication date: 2026-05-20
Last updated on: 2026-05-20
Assigner: NVIDIA Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nvidia | triton_inference_server | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability exists in the NVIDIA Triton Inference Server's DALI backend and allows an attacker to cause an out-of-bounds read.
A successful exploit of this vulnerability could lead to code execution, data tampering, denial of service, or information disclosure.
How can this vulnerability impact me? :
Exploiting this vulnerability could have serious impacts including unauthorized code execution, which might allow attackers to take control of the affected system.
It could also lead to data tampering, meaning that data integrity could be compromised.
Additionally, it could cause denial of service, disrupting the availability of the service.
Information disclosure is another possible impact, potentially exposing sensitive data.
What immediate steps should I take to mitigate this vulnerability?
NVIDIA has acknowledged the vulnerability in the Triton Inference Server's DALI backend. Immediate mitigation steps would typically involve applying any available patches or updates provided by NVIDIA through their support page or advisories.
Since the vulnerability allows for out-of-bounds reads that could lead to code execution, data tampering, denial of service, or information disclosure, it is critical to update the Triton Inference Server to a fixed version as soon as possible.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability in NVIDIA Triton Inference Server's DALI backend could lead to information disclosure, data tampering, code execution, or denial of service.
Such impacts may affect compliance with standards and regulations like GDPR and HIPAA, which require protection of sensitive data and system integrity.
However, there is no explicit information provided about direct effects on compliance with these regulations.