CVE-2026-47477

Deferred Deferred - Pending Action

Stack-Based Buffer Overflow in NVIDIA Triton Inference Server

Publication date: 2026-07-14

Last updated on: 2026-07-15

Assigner: NVIDIA Corporation

Description

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-15

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-47477

EUVD

EUVD-2026-44426

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	triton_inference_server	*
nvidia	triton_inference_server	to 26.04 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

NVIDIA Triton Inference Server for Linux has a stack-based buffer overflow vulnerability. An attacker can exploit this to cause a denial of service by crashing the server.

Detection Guidance

Detecting this vulnerability requires checking the version of NVIDIA Triton Inference Server installed on your system. Compare the installed version against the affected versions (up to and including 26.04). Use commands like 'dpkg -l | grep triton_inference_server' on Debian-based systems or 'rpm -qa | grep triton_inference_server' on RPM-based systems to check the version.

Impact Analysis

This vulnerability could allow an attacker to disrupt services by causing a denial of service. If you use NVIDIA Triton Inference Server, your system might become unresponsive or crash.

Mitigation Strategies

Immediately update NVIDIA Triton Inference Server to a version beyond 26.04. If updating is not possible, consider isolating the server from untrusted networks or disabling it until a patch is applied. Monitor NVIDIA's security advisories for updates.

Hi! I’m here to help you understand CVE-2026-47477. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70