PYSEC-2025-195

vendorUSosv

view advisory published 2025-03-31Licence: CC-BY-4.0

A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-3001US	—	0.20% (10th)	—	2025-03-31
A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack…

references

External citations — patches, advisories, analysis.

https://github.com/advisories/GHSA-qfhq-4f3w-5fphADVISORY
https://github.com/pytorch/pytorch/issues/149626REPORT
https://github.com/pytorch/pytorch/issues/149626#issue-2935860995REPORT
https://vuldb.com/?ctiid.302050REPORT
https://vuldb.com/?id.302050ADVISORY
https://vuldb.com/?submit.524212ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan