5.3Orta
CVE-2025-3000PyTorch torch.jit.script memory corruption
Açıklama
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Zayıflık türü (CWE):
CWE-119
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| linuxfoundation | pytorch | 2.6.0 | |
| — | PyTorch | 2.6.0 |
Kaynaklar ve yamalar
- VDB-302049 | PyTorch torch.jit.script memory corruption vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- VDB-302049 | CTI Indicators (IOB, IOC, IOA) signatureVDB Entry
- Submit #524197 | pytorch pytorch (torch.jit.script) torch 2.6.0 Segmentation Fault third-party-advisoryThird Party AdvisoryVDB Entry
- https://github.com/pytorch/pytorch/issues/149623 issue-trackingIssue TrackingVendor Advisory
- https://github.com/pytorch/pytorch/issues/149623#issue-2935703015 exploitissue-trackingIssue TrackingVendor Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:linuxfoundation:pytorch:2.6.0:-:*:*:*:python:*:*