NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write by sending a request. A successful exploit of this vulnerability might lead to remote code execution, denial of service, data tampering, or information disclosure.
No PoCs from references.
- https://github.com/TalEliyahu/AI-Security-Newsletter
- https://github.com/Threekiii/CVE
- https://github.com/barbaraeivyu/Triton-Inference-Server-PoC
- https://github.com/mrk336/Hybrid-Cloud-Networking-Considerations