BIT-pytorch-2025-3000

vendorUSosv

PyTorch torch.jit.script memory corruption

view advisory published 2025-05-30Licence: per source

A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-3000US	—	0.20% (10th)	—	2025-03-31
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to l…

references

External citations — patches, advisories, analysis.

https://github.com/pytorch/pytorch/issues/149623ADVISORY
https://github.com/pytorch/pytorch/issues/149623#issue-2935703015ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2025-3000WEB
https://vuldb.com/?ctiid.302049REPORT
https://vuldb.com/?id.302049ADVISORY
https://vuldb.com/?submit.524197ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan