CVE-2026-24158

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-24158
NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker may cause a denial of service by providing a large compressed payload. A successful exploit of this vulnerability may lead to denial of service.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://nvd.nist.gov/vuln/detail/CVE-2026-24158 Third Party Advisory US Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5790 Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24158 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:nvidia:triton_inference_server:*:*:*:*:*:*:*:*
History

31 Mar 2026, 01:29

Type Values Removed Values Added
References () https://nvd.nist.gov/vuln/detail/CVE-2026-24158 - () https://nvd.nist.gov/vuln/detail/CVE-2026-24158 - Third Party Advisory, US Government Resource
References () https://nvidia.custhelp.com/app/answers/detail/a_id/5790 - () https://nvidia.custhelp.com/app/answers/detail/a_id/5790 - Vendor Advisory
References () https://www.cve.org/CVERecord?id=CVE-2026-24158 - () https://www.cve.org/CVERecord?id=CVE-2026-24158 - Third Party Advisory
Summary
  • (es) NVIDIA Triton Inference Server contiene una vulnerabilidad en el endpoint HTTP donde un atacante puede causar una denegación de servicio al proporcionar una carga útil comprimida grande. Un exploit exitoso de esta vulnerabilidad puede conducir a una denegación de servicio.
CPE cpe:2.3:a:nvidia:triton_inference_server:*:*:*:*:*:*:*:*
First Time Nvidia
Nvidia triton Inference Server

24 Mar 2026, 21:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-24 21:16

Updated : 2026-03-31 01:29

NVD link : CVE-2026-24158

Mitre link : CVE-2026-24158

CVE.ORG link : CVE-2026-24158

JSON object : View

Products Affected

nvidia

  • triton_inference_server
CWE
CWE-789

Memory Allocation with Excessive Size Value