WID-SEC-W-2025-0666

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

PyTorch: Mehrere Schwachstellen ermöglichen Codeausführung

view advisory published 2025-03-31

Ein lokaler Angreifer kann mehrere Schwachstellen in PyTorch ausnutzen, um beliebigen Programmcode auszuführen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2025-3001US——
A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack…
CVE-2025-3000US——
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to l…
CVE-2025-2999US——
A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memo…
CVE-2025-2998US——
A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulatio…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan