CVE-2025-3000PyTorch torch.jit.script memory corruption

Descripción

A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• VDB-302049 | PyTorch torch.jit.script memory corruption vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-302049 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• Submit #524197 | pytorch pytorch (torch.jit.script) torch 2.6.0 Segmentation Fault third-party-advisoryThird Party AdvisoryVDB Entry
• https://github.com/pytorch/pytorch/issues/149623 issue-trackingIssue TrackingVendor Advisory
• https://github.com/pytorch/pytorch/issues/149623#issue-2935703015 exploitissue-trackingIssue TrackingVendor Advisory