BIT-pytorch-2025-2999

vendorUSosv

PyTorch torch.nn.utils.rnn.unpack_sequence memory corruption

Advisory ansehen veröffentlicht 2025-05-30Lizenz: per source

A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-2999US	—	0.20% (9th)	—	2025-03-31
A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memo…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

https://github.com/pytorch/pytorch/issues/149622ADVISORY
https://github.com/pytorch/pytorch/issues/149622#issue-2935495265ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2025-2999WEB
https://vuldb.com/?ctiid.302048REPORT
https://vuldb.com/?id.302048ADVISORY
https://vuldb.com/?submit.524198ADVISORY

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan