First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-23320

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause the shared memory limit to be exceeded by sending a very large request. A successful exploit of this vulnerability might lead to information disclosure.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
NVIDIA	Triton Inference Server	All versions prior to 25.07

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23320US Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5687Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2025-23320Third Party Advisory

Timeline

Published: Aug 6, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-233217.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a divide by zero issue by issuing an CVE-2025-233227.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a double free when a strea CVE-2025-233237.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, le CVE-2025-233247.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, le CVE-2025-233257.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause uncontrolled recursion through a CVE-2025-233267.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through a sp CVE-2025-233279.1NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through spec CVE-2025-233287.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write through a CVE-2025-233297.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause memory corruption by identifying CVE-2025-233305.5NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful CVE-2025-233317.5NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocation with excessive si CVE-2025-233325.0NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer defer