5.3Medium
CVE-2025-3000PyTorch torch.jit.script memory corruption
Description
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Weakness (CWE):
CWE-119
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| linuxfoundation | pytorch | 2.6.0 | |
| — | PyTorch | 2.6.0 |
References and patches
- VDB-302049 | PyTorch torch.jit.script memory corruption vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- VDB-302049 | CTI Indicators (IOB, IOC, IOA) signatureVDB Entry
- Submit #524197 | pytorch pytorch (torch.jit.script) torch 2.6.0 Segmentation Fault third-party-advisoryThird Party AdvisoryVDB Entry
- https://github.com/pytorch/pytorch/issues/149623 issue-trackingIssue TrackingVendor Advisory
- https://github.com/pytorch/pytorch/issues/149623#issue-2935703015 exploitissue-trackingIssue TrackingVendor Advisory
CPE matches (NVD) (1)
cpe:2.3:a:linuxfoundation:pytorch:2.6.0:-:*:*:*:python:*:*