NVIDIA Triton Inference Server contains an integer overflow vulnerability (CWE-190) in its DALI backend component. This vulnerability can be triggered remotely by an attacker with low complexity and limited privileges, requiring user interaction. Successful exploitation may result in arbitrary code execution, unauthorized data modification, or service disruption. The CVSS 3.1 base score is 8.0, reflecting high impact across confidentiality, integrity, and availability. As of the published date, no patch or official remediation level has been disclosed by NVIDIA.

If exploited, this vulnerability could lead to full compromise of the affected Triton Inference Server instance, including execution of arbitrary code, tampering with data processed by the server, or causing denial of service. This impacts the confidentiality, integrity, and availability of the system. No evidence of active exploitation is currently known.

Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. Until an official fix is released, limit exposure by restricting access to the Triton Inference Server and monitoring for suspicious activity related to the DALI backend. Avoid unnecessary user interactions that could trigger the vulnerability.