Limitations

AI Inference Server Release Notes

Portfolio
Industrial AI
Product
AI Inference Server
Software version
v2.7
Edition
01/2026
Language
English
  • Only one AI Inference Server instance can be installed on an Industrial Edge Device. If you try to install more than one app instance with different MLFB numbers, you will receive error messages, and you will not be able to use AI Inference Server.

  • The AI Inference Server relies on the ready-to-use connectors provided by the Industrial Edge Plattform. The performance limitations for the connectors are listed respectively in the help file of each app and each connector.

  • The performance of the connectors and the resolutions of the collected data is responsibility of each connector provided by the Industrial Edge Plattform. Restrictions and limitations are documented in the respective user manual.

  • AI Inference Server can browse tags available only in the Databus of the Industrial Edge Device which is installed as the Industrial Edge Plattform does not allow at the current version to access the Databus of other Industrial Edge Devices from one Industrial Edge Device.

  • The browse tags capability covers in this version only tags available on the data bus coming from the SIMATIC S7 connector, SIMATIC S7+ connector, OPC-UA connector, Profinet IO connector. For the Profinet IO connector browse tags functionality can be used only with default metadata topics.

  • Currently only static IP addresses are supported.

  • Free space management of local storage is not part of AI Inference Server (it should be checked periodically whether there is enough free space to work with a new configuration package file which also contains the AI Model)

  • AI Inference Server was tested with ML pipelines prepared and packaged using AI SDK and AI Asset Manager.

  • The state of a Python model is not persisted if user restarts the pipeline: every run/start of a pipeline via AI Inference Server UI is considered as a new call to the Python's 'import' directive.

  • Performance of the parallel step execution strongly depends on the used libraries which are running on the same CPU core thus in some cases, the overall performance of the pipeline will be only slightly better.

  • AI Inference Server truncates user-created Python log message at 1500 characters due to performance reasons.

  • Data access can be successful even if a topic does not exist on the data bus (reason: it is possible to subscribe for a non-existing topic)

  • All the steps can get value from data bus (via AI Inference Server) without considering the pipeline order in case the data of steps is coming from different AI Runtime Family apps (asynchronous mode) which might cause problem in some scenarios.

  • Performance reduction can happen when the image visualization is turned on. The measured differences are between 3-5%

  • The following keys are used for internal purposes and cannot be used in Python scripts:

Name of key Comment
"timestamp" AI Inference Server inserts "timestamp" variable on the data bus

Technical information

  • AI Inference Server converts the message data type from data bus according to the following table (left side: type from data bus, right side: converted type how the AI Inference Server handles it). When the data type of an input or output is 'Integer' then the following data bus types can be accepted: 'Int', 'Byte', 'DInt', 'Word', 'LInt', 'SInt', 'USInt','UInt', 'UDInt', 'ULInt', 'DWord', 'LWord', 'Char'.

Databus type Converted type (how AI Inference Server handles it)
'Bool' 'Boolean'
'Int' 'Integer'
'Byte' 'Integer'
'DInt' 'Integer'
'Real' 'Double'
'String' 'String'
'Word' 'Integer'
'LInt' 'Integer'
'SInt' 'Integer'
'USInt' 'Integer'
'UInt' 'Integer'
'UDInt' 'Integer'
'ULInt' 'Integer'
'LReal' 'Double'
'DWord' 'Integer'
'LWord' 'Integer'
'Char' 'String'
'WChar' 'String'
'WString' 'String'
'Date' 'String'
'DateTime' 'String'
'Date_And_Time' 'String'
'DT' 'String'
'DTL' 'String'
'LDT' 'String'
'TOD' 'String'
'Time_Of_Day' 'String'
'LTOD' 'String'
'LTime_Of_Day' 'String'
'S5Time' 'String'
'Time' 'String'
'LTime' 'String'
'Bool[]' 'BooleanArray'
'Byte[]' 'Int8Array' or 'IntegerArray'
'SInt[]' 'Int8Array' or 'IntegerArray'
'Int[]' 'Int16Array' or 'IntegerArray'
'DInt[]' 'Int32Array' or 'IntegerArray'
'LInt[]' 'Int64Array' or 'IntegerArray'
'USInt[]' 'UInt8Array' or 'IntegerArray'
'UInt[]' 'UInt16Array' or 'IntegerArray'
'UDInt[]' 'UInt32Array' or 'IntegerArray'
'ULInt[]' 'UInt64Array' or 'IntegerArray'
'Word[]' 'UInt16Array' or 'IntegerArray'
'DWord[]' 'UInt32Array' or 'IntegerArray'
'LWord[]' 'UInt64Array' or 'IntegerArray'
'Real[]' 'Float32Array' or 'DoubleArray'
'LReal[]' 'Float64Array' or 'DoubleArray'
'String[]' 'StringArray'
'WString[]' 'StringArray'
'Char[]' 'StringArray'
'WChar[]' 'StringArray'
'Date[]' 'StringArray'
'DateTime[]' 'StringArray'
'Date_And_Time[]' 'StringArray'
'DT[]' 'StringArray'
'DTL[]' 'StringArray'
'LDT[]' 'StringArray'
'TOD[]' 'StringArray'
'Time_Of_Day[]' 'StringArray'
'LTOD[]' 'StringArray'
'LTime_Of_Day[]' 'StringArray'
'S5Time[]' 'StringArray'
'Time[]' 'StringArray'
'LTime[]' 'StringArray'
  • AI Inference Server supports configuration package execution based on the following table:

Configuration parameter AI Inference Server (MLFB 6AV2170-0LA10-0AA0) AI Inference Server - 3 pipelines (MLFB 6AV2170-0LA10-1AA0) AI Inference Server GPU accelerated (MLFB 6AV2170-0LA11-0AA0)
Supported Python versions 3.10.19, 3.11.14, 3.12.12 3.10.19, 3.11.14, 3.12.12 3.10.19, 3.11.14, 3.12.12
Supported Pip version 25.2 25.2 25.2
Supported NumPy versions 1.x, 2.x 1.x, 2.x 1.x, 2.x
CPU configuration package Yes Yes Yes
GPU configuration package Not supported Not supported Yes
Max. size of configuration package 2.2 GiB 2.2 GiB 2.2 GiB
Configuration package upload request timeout 60 mins 60 mins 60 mins
Reserved memory for Python runtime 1.5 GiB 4 GiB 6 GiB (max 12 GiB)
Reserved memory for External (GPU) runtime n.a. n.a. 6 GiB (max 16 GiB)
Max. number of pipelines executed simultaneously 1 3 100
Max. number of variables in a pipeline 1000 1000 1000
Max. length of pipeline description 2000 2000 2000
MQTT keep alive 60 secs 60 secs 60 secs
ONNX operations on GPU n.a. n.a. ONNX opset version 21, ONNX version 1.16.1 based on ONNX Runtime 1.20
  • Maximum payload size with 1 sec / message frequency and 200 MB dedicated memory for Orchestrator:

    • With static payload size (as large string), memory fragmentation does not occur

      • by using SIMATIC S7 Connector v1.6.0-4: 6 Mbytes

      • by using IE MQTT Connector v1.5.1: 10 Mbytes

    • With dynamic payload size, memory fragmentation may occur:

      • by using SIMATIC S7 Connector v1.6.0-4: 6 Mbytes

      • by using IE MQTT Connector v1.5.1: 6 Mbytes

  • AI Inference Server converts integer values based on :

Types Converted type Comment
32 bit integer value n.a. The original value is kept without type conversion (e.g. int32 remains int32)
64 bit integer value String Due to limitation of JSON

Known issues

  • When downloading the logs of an Industrial Edge App, the file is stored with the extension ".tar" by default although the content is a zip archive. Rename the file from .tar to .zip in case the archive reader cannot recognize the archive type by file contents.

  • The app could crash if a pipeline contains more variables as the supported (due to memory limit). See table of the configuration package execution in Technical information

  • In case of any problem (e.g., restarting of AI Inference Server or restarting of Industrial Edge Device) the logging configuration needs to be re-enabled. (Switch off and switch on)

  • If the memory limit is reached during the runtime of a pipeline, then the pipeline execution will crash without warning. The AI Inference Server will continue to work, and an error will pop up in the UI of AI Inference Server, and the process will go into Error state, however, no indication of memory limit reach is visible.

  • AI Inference Server swallows a row of input with inter signal alignment. Inter signal alignment assumes a continuous stream of input data and might not handle gaps correctly if the gap length significantly exceeds the defined alignment periodicity. The last alignment window might not be forwarded until a signal belonging to the next alignment window is detected. Workaround for the problem: Test your pipeline and finetune the inter-signal alignment time interval as appropriate for your use case. The test must send one additional row at the end to make sure all the preceding input rows are flushed from the buffer and forwarded to the pipeline.

  • Parallel importing on multiple internet browser tabs is not supported Workaround for the problem: Use only one browser tab when you import a configuration package.

  • It is not possible to downgrade AI Inference Server to an earlier version via Industrial Edge Management Workaround for the problem: Uninstall the existing app from your Industrial Edge Device and install an earlier version. The previously imported / received pipelines and their mapping information will be lost, you need to re-import and re-map them again.

  • The app description (displayed on Industrial Edge Management) is not refreshed after an upgrade process due to an Industrial Edge Management issue.

  • LogModule can write strings to the log. Any other type causes a fatal error inside the Runtime and the pipeline is killed, like:

def run (data):

.... log.info([1,2,3])
  • "503 Service unavailable" message may appear after the app upgrade (via Industrial Edge Management), the upgraded version of app is not working properly. Workaround for the problem: restart the app

  • The data of parameter which is received from the data bus may congest together with the data of variable in case the python script processes it too slow. (Reason: the parameters and the variables are read from the same data connector). The internal queue can be fine-tuned, if necessary. Read the user manual.

  • Simultaneous pipeline execution may cause app crash in case the used memory of internal Python Runtime reaches the limit.

  • Performance drop might happen in case of multiple pipeline execution (more calculation is required from the same CPU)

  • In case the inputs come faster than the Python script can handle them, Out of memory issues may happen. Workaround for the problem: Test your AI models before deploying them to production.

  • The app does not check how many CPU core exist. It is possible to set a higher number for the parallel step execution than the available CPU cores. It may cause performance degradation. Maximum 8 cores are supported.

  • Data transfer may delay between pipeline steps in case hostname of the ZMQ connection is invalid, and "Object" type is defined for pipeline output. Workaround for the problem: Make sure the outbound ZMQ connection hostname is correct, present, and ready to accept incoming connections.

  • There are page rendering problems on Mozilla Firefox browser: the selected tab is not underlined on "Pipeline visualization", "Settings" and "About & legal information" pages.

  • Databus app can crash in case of high frequency pipeline input (out of scope of AI Inference Server). Reason: in case the first step (usually a pre-processing) is much slower than the frequency of pipeline input. It may happen the inputs are being piled up in the network layer causing an Out Of Memory crash in the Databus app, which is silently restarted and the AI Inference Server reconnects automatically. Notes: Inter Signal Alignment related use cases are not impacted. For them the inputs are immediately handled and this way they cannot pile up. Workaround for the problem: Creation of an additional pipeline step before the first step which simply forwards it's input as output may help. (in this case, pipeline inputs cannot pile up in the network layer). It can help when there are only a few peaks (longer pre-processing time, but it happens occasionally only) because an internal queue/buffer is in charge between the Pipeline steps. Depending on the data loss app level configuration (in config.json) the pipeline will be stopped with an error message or warning log entries will be created.

  • If the pipeline has been deleted by the AI Asset Manager (or AI Model Manager) app, then it is not listed with "Removed" status when the 'Show removed pipelines' toggle switch is activated.

  • Statistics & Visualization page is updated in every 2 seconds. There may be situations when the number of input data and output data is different from the values displayed on the user interface. Thus the inference statistics and comprehensive statistics may differ from each other.

  • Comprehensive statistics shows the shortest and longest time of a measured part, these values can be connected to different inputs (as shortest or longest time), which can result in a different summary if you try to add these values manually.

  • During startup, the following error and warning messages may be logged while synchronizing with external services:

    ..... [API] [E] [mTLS] X.509 stream error:...
    ..... [API] [E] [mTLS] Workload not registered (no identity issued)
    ..... [API] [W] [mTLS] X509 stream ended, restarting... Attempt 1

    This behavior is expected, and AI Inference Server will operate properly once the following info log line appears after one or more attempts:

    .... [API] [I] [mTLS] Reloading TLS context for HTTPS server
  • On virtual Industrial Edge Devices where IEVD does not support Secure Production Identity Framework For Everyone (SPIFFE), AI Asset Manager v2.5.0 cannot fully manage AI Inference Server v2.7.0 and is limited to collecting device metric data only.

  • Open-Source Components Notes

Vendor Open-Source Component name Version Risk Description
Angular Node.js Package: @angular/animations 19.1.4 Package will reach its end of life on May 19, 2026
Angular Node.js Package: @angular/common 19.1.4 1. Package will reach its end of life on May 19, 20262. Angular is a development platform for building mobile and desktop web app using TypeScript/JavaScript and other languages. There is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. CVE-2025-66035
Angular Node.js Package: @angular/compiler 19.1.4 1. Package will reach its end of life on May 19, 20262. There is a Stored Cross-Site Scripting (XSS) vulnerability in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. CVE-2025-66412
Angular Node.js Package: @angular/core 19.1.4 Package will reach its end of life on May 19, 2026
Angular Node.js Package: @angular/forms 19.1.4 Package will reach its end of life on May 19, 2026
Angular Node.js Package: @angular/platform-browser 19.1.4 Package will reach its end of life on May 19, 2026
Angular Node.js Package: @angular/platform-browser-dynamic 19.1.4 Package will reach its end of life on May 19, 2026
Angular Node.js Package: @angular/router 19.1.4 Package will reach its end of life on May 19, 2026
Chris O'Hara Node.js Package: validator 13.15.15 1. There is a URL validation bypass vulnerability in validator.js. The isURL() function uses "://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and domain validation by crafting URLs leading to XSS and Open Redirect attacks. Mitigating Factor: You are only affected if you use the isURL validator to parse URLs that are direct user input. CVE-2025-562002. The package validator is vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors (\uFE0F, \uFE0E) appearing in a sequence which lead to improper string length calculation. This can lead to an app using isLength for input validation accepting strings significantly longer than intended, resulting in issues like data truncation in databases, buffer overflows in other system components, or denial-of-service. CVE-2025-12758
Daniel Stenberg cURL 8.16.0 1. curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more. CVE-2025-109662. When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent. CVE-2025-152243. When doing SSH-based transfers using either SCP or SFTP, and setting the knownhosts file, libcurl could still mistakenly accept connecting to hosts not present in the specified file if they were added as recognized in the libssh global knownhosts file. CVE-2025-150794. When doing TLS related transfers with re-used easy or multi handles and altering the CURLSSLOPT_NO_PARTIALCHAIN option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not. Mitigating Factor: This only affects TLS related transfers and only if CURLOPT_CA_CACHE_TIMEOUT is not disabled (set to zero). This vulnerability does not affect the curl command line tool. CVE-2025-148195. When an oauth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host. Mitigating Factor: The redirect-to URL needs to have the user name component set (but not the password) to trigger this vulnerability. Note: This token leak also happens if the redirect is done to the same hostname, just a different protocol (and port). CVE-2025-145246. When doing multithreaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well. Mitigating Factor: It does not apply to users of WinLDAP (the flavor of LDAP provided in Windows) since that API does not offer those TLS related options. This is only a potential problem when doing LDAP transfers concurrently in more than one thread. The global state was used for the connection setup (only), so this vulnerability is highly timing sensitive. CVE-2025-140177. When using CURLOPT_PINNEDPUBLICKEY option with libcurl or --pinnedpubkey with the curl tool, curl should check the public key of the server certificate to verify the peer. This check was skipped in a certain condition that would then make curl allow the connection without performing the proper check, thus not noticing a possible impostor. To skip this check, the connection had to be done with QUIC with ngtcp2 built to use GnuTLS and the user had to explicitly disable the standard certificate verification. CVE-2025-13034
Express.js Node.js Package: body-parser 2.2.0 body-parser is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This can lead to service slowdown or partial outages under sustained malicious traffic. CVE-2025-13466
Go The Go Programming Language 1.25.1 1. net/textproto: excessive CPU consumption in Reader.ReadResponse. The Reader.ReadResponse function constructed a response string through repeated string concatenation of lines. When the number of lines in a response is large, this could cause excessive CPU consumption. CVE-2025-617242. crypto/x509: quadratic complexity when checking name constraints. Due to the design of the name constraint checking algorithm, the processing time of some inputs scales non-linearly with respect to the size of the certificate. CVE-2025-581873. The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http:///". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement. CVE-2025-479124. tar.Reader did not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions could cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input could result in large allocations. CVE-2025-581835. Due to the design of the PEM parsing function, the processing time for some inputs scales non-linearly with respect to the size of the input. Mitigating Factor: This affects programs which parse untrusted PEM inputs. CVE-2025-617236. Despite HTTP headers having a default limit of 1 MB, the number of cookies that can be parsed did not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption. CVE-2025-581867. When parsing DER payloads, memories were being allocated prior to fully validating the payloads. This permits an attacker to craft a big empty DER payload to cause memory exhaustion in functions such as asn1.Unmarshal, x509.ParseCertificateRequest, and ocsp.ParseResponse. CVE-2025-581858. Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. Mitigating Factor: This affects programs which validate arbitrary certificate chains. CVE-2025-581889. The ParseAddress function constructed domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this could cause excessive CPU consumption. CVE-2025-6172510. The crypto/tls conn.Handshake method returns an error on the server-side when ALPN negotation fails which can contain arbitrary attacker controlled information provided by the client-side of the connection which is not escaped. Mitigating Factor: This affects programs which log these errors without any additional form of sanitization, and may allow injection of attacker controlled information into logs. CVE-2025-5818911. Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption. CVE-2025-6172912. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com. CVE-2025-61727
Isaac Z. Schlueter (isaacs) Node.js Package: glob 7.2.3 Node.js Package: glob versions ≤ 8.1.0 have reached their end of life.
Isaac Z. Schlueter (isaacs) Node.js Package: glob 10.4.5 The glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c <command> <patterns> is used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger command injection and achieve arbitrary code execution under the user or CI account privileges. Mitigating Factor: Library API Not Affected. This vulnerability is limited to the command-line interface with -c/--cmd option. CVE-2025-64756
Jordan Harband Node.js Package: qs 6.14.0 Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS. The arrayLimit option in qs does not enforce limits for bracket notation (a=1&a=2), allowing attackers to cause denial-of-service via memory exhaustion. The arrayLimit option only checks limits for indexed notation (a=1&a=2) but completely bypasses it for bracket notation (a=1&a=2). Mitigating Factor: Apps using arrayLimit for DoS protection are vulnerable. CVE-2025-15284
Nodeca Node.js Package: js-yaml 4.1.0 js-yaml is a JavaScript YAML parser and dumper. It is possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution ('proto'). Note: All users who parse untrusted yaml documents may be impacted. CVE-2025-64718
OpenSSL Project OpenSSL 3.6.0 OpenSSL 3.6.0 will reach its end of life on Nov 1, 2026
Python Packaging Authority Python Package: pip 25.2 1. When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that upgrading pip to a "fixed" version for this vulnerability doesn't fix all known vulnerabilities that are remediated by using a Python version that implements PEP 706. Mitigating Factor: Note that this is a vulnerability in pip's fallback implementation of tar extraction for Python versions that don't implement PEP 706 and therefore are not secure to all vulnerabilities in the Python 'tarfile' module. If you're using a Python version that implements PEP 706 then pip doesn't use the "vulnerable" fallback code. CVE-2025-8869
Python Software Foundation Python 3.10.19 Python version 3.10.19 will reach its end of life on Oct 31, 2026
Python Software Foundation Python 3.11.14 Python version 3.11.14 will reach its end of life on Oct 31, 2027
Python Software Foundation Python 3.12.12 Python version 3.12.12 will reach its end of life on Oct 31, 2028
Simon Eskildsen Go Package: github.com/sirupsen/logrus 1.8.1 A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving Writer() unusable and causing app unavailability (DoS). CVE-2025-65637
Sindre Sorhus Node.js Package: path-is-absolute 1.0.1 Node.js Package: path-is-absolute has reached its end of life.

Components Notes of AI Inference Server GPU accelerated:

Vendor Open-Source Component name Version Risk Description
NVIDIA CUDA Toolkit 12.8.0 1. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service. CVE-2025-232722. NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service. CVE-2025-232743. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by providing certain image dimensions. A successful exploit of this vulnerability may lead to denial of service and information disclosure. CVE-2025-232754. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write by running nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to denial of service. CVE-2025-233385. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service. CVE-2025-232486. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service. CVE-2025-232717. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service. CVE-2025-233408. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary where a user may cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability may lead to a partial denial of service. CVE-2025-232559. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running cuobjdump. CVE-2025-2333910. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the user to run nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running nvdisasm. CVE-2025-2330811. NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to a limited denial of service. CVE-2025-2334612. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a divide by zero error by submitting a specially crafted JPEG file. A successful exploit of this vulnerability may lead to denial of service. CVE-2025-2327313. NVIDIA CUDA Toolkit contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. CVE-2025-2324714. NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-5387015. NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-5387116. NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-5387217. NVIDIA CUDA toolkit for Windows contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-5387318. NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-5387419. NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-5387520. NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-5387621. NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause a NULL pointer exception by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-5387722. NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a crash by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-5387823. NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a crash by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-53879
NVIDIA Triton Inference Server Core 25.07 1. A vulnerability in NVIDIA Triton Server for Linux where an attacker may cause an improper validation of specified quantity in input. A successful exploit of this vulnerability may lead to denial of service. CVE-2025-332112. A vulnerability in NVIDIA Triton Inference Server where an attacker may cause an improper check for unusual or exceptional conditions issue by sending extra large payloads. A successful exploit of this vulnerability may lead to denial of service. CVE-2025-332013. NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service. CVE-2025-33202
Tencent RapidJSON 1.1.0 1. Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the GenericReader::ParseNumber() function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer underflow vulnerability (when the file is parsed), leading to elevation of privilege. CVE-2024-385172. Tencent RapidJSON Elevation of Privilege Vulnerability: Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the GenericReader::ParseNumber() function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer overflow vulnerability (when the file is parsed), leading to elevation of privilege. CVE-2024-39684

Restricted / Copyright © 2025 Siemens Aktiengesellschaft – All rights reserved.

Copying or distribution or communication of the contents of this document are not allowed unless with express written permission from Siemens.