BIT-pytorch-2025-3001

vendorUSosv

PyTorch torch.lstm_cell memory corruption

view advisory published 2025-05-30Licence: per source

A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-3001US	—	0.20% (10th)	—	2025-03-31
A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack…

references

External citations — patches, advisories, analysis.

https://github.com/pytorch/pytorch/issues/149626ADVISORY
https://github.com/pytorch/pytorch/issues/149626#issue-2935860995ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2025-3001WEB
https://vuldb.com/?ctiid.302050REPORT
https://vuldb.com/?id.302050ADVISORY
https://vuldb.com/?submit.524212ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan