3.3Low
CVE-2025-3136PyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_allocator_delete memory corruption
Description
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| linuxfoundation | pytorch | 2.6.0 | |
| — | PyTorch | 2.6.0 |
References and patches
- VDB-303041 | PyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_allocator_delete memory corruption vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- VDB-303041 | CTI Indicators (IOB, IOC, IOA) signatureVDB Entry
- Submit #525252 | pytorch pytorch (in torch.cuda.memory.caching_allocator_delete) torch 2.6.0 invalid memory access third-party-advisoryExploitThird Party AdvisoryVDB Entry
- https://github.com/pytorch/pytorch/issues/149821 issue-trackingExploitIssue TrackingVendor Advisory
- https://github.com/pytorch/pytorch/issues/149821#issuecomment-2765311086 issue-trackingExploitIssue TrackingVendor Advisory
- https://github.com/pytorch/pytorch/issues/149821#issue-2940838975 exploitissue-trackingExploitIssue Tracking
- https://github.com/ARPANET-cybersecurity/vuldb/issues/2 Not Applicable
CPE matches (NVD) (1)
cpe:2.3:a:linuxfoundation:pytorch:2.6.0:-:*:*:*:python:*:*