CVE-2025-33254

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-33254
NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal state corruption. A successful exploit of this vulnerability may lead to a denial of service.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://nvd.nist.gov/vuln/detail/CVE-2025-33254 Third Party Advisory US Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5790 Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2025-33254 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:nvidia:triton_inference_server:*:*:*:*:*:*:*:*
History

31 Mar 2026, 01:31

Type Values Removed Values Added
Summary
  • (es) NVIDIA Triton Inference Server contiene una vulnerabilidad donde un atacante puede causar corrupción del estado interno. Un exploit exitoso de esta vulnerabilidad puede llevar a una denegación de servicio.
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:nvidia:triton_inference_server:*:*:*:*:*:*:*:*
First Time Nvidia
Nvidia triton Inference Server
References () https://nvd.nist.gov/vuln/detail/CVE-2025-33254 - () https://nvd.nist.gov/vuln/detail/CVE-2025-33254 - Third Party Advisory, US Government Resource
References () https://nvidia.custhelp.com/app/answers/detail/a_id/5790 - () https://nvidia.custhelp.com/app/answers/detail/a_id/5790 - Vendor Advisory
References () https://www.cve.org/CVERecord?id=CVE-2025-33254 - () https://www.cve.org/CVERecord?id=CVE-2025-33254 - Third Party Advisory

24 Mar 2026, 21:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-24 21:16

Updated : 2026-03-31 01:31

NVD link : CVE-2025-33254

Mitre link : CVE-2025-33254

CVE.ORG link : CVE-2025-33254

JSON object : View

Products Affected

nvidia

  • triton_inference_server
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

NVD-CWE-noinfo