PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function
A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-2998US | — | — | ||
A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulatio… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-192.yamlWEB
- https://github.com/pytorch/pytorchPACKAGE
- https://github.com/pytorch/pytorch/commit/494518046816d29099b7d056a74ffa5c244fdcddWEB
- https://github.com/pytorch/pytorch/issues/149622WEB
- https://github.com/pytorch/pytorch/issues/149622#issue-2935495265WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-2998ADVISORY
- https://vuldb.com/?ctiid.302047WEB
- https://vuldb.com/?id.302047WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan