The vulnerability is rooted in the server's handling of shared memory for inference request parameters. By manipulating the offset and size parameters during shared memory registration and inference request processing, an attacker can cause illegal memory operations. This can lead to segmentation faults, program instability, or potentially remote code execution by writing arbitrary data to controlled memory locations.

An attacker first sets up a malicious shared memory region and registers it with the server. They then craft an inference request with a specially designed offset that points to an illegal memory address. When the server processes this request, it attempts to write inference results to the specified out-of-bounds address, leading to a segmentation fault or other unintended behavior.

This vulnerability affects users of the Triton Inference Server version r23.04. Specifically, clients utilizing the shared memory functionality for inference requests are at risk, as attackers can exploit this vulnerability to cause denial of service or potentially execute arbitrary code.