An integer overflow vulnerability in the NVIDIA Triton Inference Server DALI backend creates a high-risk scenario for system instability and potential arbitrary code execution.

This is an integer overflow vulnerability in the DALI backend that requires low-privileged authenticated access and user interaction to trigger, potentially leading to high impact on confidentiality, integrity, and availability (AV:N/AC:L/PR:L/UI:R).

An attacker successfully exploiting this integer overflow could compromise the integrity and availability of the AI inference pipeline, potentially leading to malicious data manipulation or a complete denial of service. With a CVSS score of 8.0, this issue presents a significant threat to environments relying on Triton for critical production inference tasks.

Immediate Action: Update NVIDIA Triton Inference Server to version r26.03 or later immediately to resolve the vulnerable DALI backend component.

Proactive Monitoring: Monitor inference server logs for abnormal input patterns or unexpected service restarts that may indicate attempted exploitation of the DALI backend.

Compensating Controls: Implement strict input validation for all requests sent to the Triton Inference Server and ensure that the service runs with the minimum necessary privileges to limit the impact of a potential compromise.

Public Exploit Available: Unknown

Given the high CVSS severity, administrators should prioritize updating to release r26.03. Testing should be performed in a staging environment to ensure compatibility before deploying the patch into production inference clusters.