PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function
A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-2998US | — | — | ||
A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulatio… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-192.yamlWEB
- https://github.com/pytorch/pytorchPACKAGE
- https://github.com/pytorch/pytorch/commit/494518046816d29099b7d056a74ffa5c244fdcddWEB
- https://github.com/pytorch/pytorch/issues/149622WEB
- https://github.com/pytorch/pytorch/issues/149622#issue-2935495265WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-2998ADVISORY
- https://vuldb.com/?ctiid.302047WEB
- https://vuldb.com/?id.302047WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan