PyTorch is vulnerable to memory corruption through its torch.jit.script function
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-3000US | — | — | ||
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to l… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-194.yamlWEB
- https://github.com/pytorch/pytorchPACKAGE
- https://github.com/pytorch/pytorch/commit/b90c94991cdf8b87c8f7439f79518e0ef2c4ca4fWEB
- https://github.com/pytorch/pytorch/issues/149623WEB
- https://github.com/pytorch/pytorch/issues/149623#issue-2935703015WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-3000ADVISORY
- https://vuldb.com/?ctiid.302049WEB
- https://vuldb.com/?id.302049WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan