This vulnerability is an integer overflow in the DALI backend of NVIDIA Triton Inference Server. According to the CVE description, exploitation could lead to code execution, data tampering, or denial of service. The flaw is identified as CWE‑190.

The issue affects NVIDIA Triton Inference Server. No specific affected releases are mentioned in the notification, so any deployment that uses the DALI backend should be regarded as potentially vulnerable unless it has been updated to a version that includes the fix.

With a CVSS score of 8 the risk is considered high. The EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog. The integer overflow is triggered by malformed input that the DALI backend processes, so the likely attack vector is remote via crafted inference requests transmitted to a Triton server over the network. An attacker would need to supply input that causes the overflow, potentially enabling arbitrary code execution or service disruption. The inference about the attack vector is based on the nature of the affected component and the description of the vulnerability.