BIT-pytorch-2025-2998

vendorUSosv

PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption

Advisory ansehen veröffentlicht 2025-05-30Lizenz: per source

A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-2998US	—	0.20% (10th)	—	2025-03-31
A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulatio…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

https://github.com/pytorch/pytorch/issues/149622ADVISORY
https://github.com/pytorch/pytorch/issues/149622#issue-2935495265ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2025-2998WEB
https://vuldb.com/?ctiid.302047REPORT
https://vuldb.com/?id.302047ADVISORY
https://vuldb.com/?submit.524151ADVISORY

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan