BIT-pytorch-2025-2998

vendorUSosv

PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption

view advisory published 2025-05-30Licence: per source

A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-2998US	—	0.20% (10th)	—	2025-03-31
A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulatio…

references

External citations — patches, advisories, analysis.

https://github.com/pytorch/pytorch/issues/149622ADVISORY
https://github.com/pytorch/pytorch/issues/149622#issue-2935495265ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2025-2998WEB
https://vuldb.com/?ctiid.302047REPORT
https://vuldb.com/?id.302047ADVISORY
https://vuldb.com/?submit.524151ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan