Integer Overflow or Wraparound Affecting nvidia-pytriton package, versions [0,]
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-PYTHON-NVIDIAPYTRITON-13647012
- published21 Oct 2025
- disclosed6 Aug 2025
- creditUnknown
Introduced: 6 Aug 2025
CVE-2025-23327 (opens in a new tab)How to fix?
There is no fixed version for nvidia-pytriton.
Overview
nvidia-pytriton is a PyTriton - Flask/FastAPI-like interface to simplify Triton's deployment in Python environments.
Affected versions of this package are vulnerable to Integer Overflow or Wraparound via element count handling. An attacker could cause a denial of service and data tampering through specially crafted inputs containing overly large or negative values.
This vulnerability is only exploitable when using the default bundled Triton Server binary /pytriton/tritonserver/bin/tritonserver.
Workaround
It is possible to update the Triton Server binary to a patched version independently of PyTriton; See Building binaries from source.