CVE-2025-3000PyTorch torch.jit.script memory corruption

Beschreibung

A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• VDB-302049 | PyTorch torch.jit.script memory corruption vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-302049 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• Submit #524197 | pytorch pytorch (torch.jit.script) torch 2.6.0 Segmentation Fault third-party-advisoryThird Party AdvisoryVDB Entry
• https://github.com/pytorch/pytorch/issues/149623 issue-trackingIssue TrackingVendor Advisory
• https://github.com/pytorch/pytorch/issues/149623#issue-2935703015 exploitissue-trackingIssue TrackingVendor Advisory