CVE-2025-23320

Katalog CVE

CVSS 7.5 · High EPSS 0,93%

Kerentanan Generation of Error Message Containing Sensitive Information pada nvidia triton inference server. Skor CVSS 3.1 7.5 (High) menurut nvidia.com.

Deskripsi (NVD)

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause the shared memory limit to be exceeded by sending a very large request. A successful exploit of this vulnerability might lead to information disclosure.

Rincian

Terbit di NVD

6 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber nvidia.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-209: Generation of Error Message Containing Sensitive Information

EPSS (30 hari)

0,93% peluang dieksploitasi; lebih tinggi dari 59,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://nvidia.custhelp.com/app/answers/detail/a_id/5687 advisory vendor
• https://nvd.nist.gov/vuln/detail/CVE-2025-23320 pemerintah AS
• https://www.cve.org/CVERecord?id=CVE-2025-23320 advisory pihak ketiga