← All Advisories

Integer Overflow in NVIDIA Triton Inference Server Allows Code Execution or Denial of Service

Last refreshed2026-09-26

Status: UPDATED  |  Advisory ID: CVE-2026-24210

Key Details

CVECVE-2026-24210
CVSS Score / Version7.5 (High) / CVSS v3.1
Updated2026-09-24
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Proseattack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected productsnvidia Triton Inference Server
Classified asCWE-190 (Integer Overflow or Wraparound)
Exploitation prediction (EPSS)0.60% probability of exploitation in the next 30 days (47% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
nvidiaTriton Inference Server
SubsystemsGeneral OT
SectorsMultiple

What to Know

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to denial of service.

What to Do

Monitor nvidia's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-24210
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-24210
Vendor advisoryhttps://nvidia.custhelp.com/app/answers/detail/a_id/5828