CVE-2025-23322 — Double Free in Nvidia Triton Inference Server

CWE-415 — Double Free3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 62.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nvidia Triton Inference Server
Timeline
PublishedAug 6

Description

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a double free when a stream is cancelled before it is processed. A successful exploit of this vulnerability might lead to denial of service.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5nvidia/triton_inference_serverAll versions prior to 25.06

🔴Vulnerability Details

2
CVEList
CVE-2025-23322: NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a double free when a stream is cance↗2025-08-06
▶
GHSA
GHSA-c7ff-r8w3-gx9q: NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a double free when a stream is cance↗2025-08-06
▶
CVE-2025-23322 — Double Free in Nvidia | cvebase