CVE-2025-3000

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-3000
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 3.1 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://github.com/pytorch/pytorch/issues/149623 Issue Tracking Vendor Advisory
https://github.com/pytorch/pytorch/issues/149623#issue-2935703015 Issue Tracking Vendor Advisory
https://vuldb.com/?ctiid.302049 Permissions Required VDB Entry
https://vuldb.com/?id.302049 Third Party Advisory VDB Entry
https://vuldb.com/?submit.524197 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:linuxfoundation:pytorch:2.6.0:-:*:*:*:python:*:*
History

29 May 2025, 15:53

Type Values Removed Values Added
CPE cpe:2.3:a:linuxfoundation:pytorch:2.6.0:-:*:*:*:python:*:*
First Time Linuxfoundation pytorch
Linuxfoundation
Summary
  • (es) Se ha encontrado una vulnerabilidad clasificada como crítica en PyTorch 2.6.0. Esta afecta a la función torch.jit.script. La manipulación provoca corrupción de memoria. Es posible lanzar el ataque contra el host local. Se ha hecho público el exploit y puede que sea utilizado.
References () https://github.com/pytorch/pytorch/issues/149623 - () https://github.com/pytorch/pytorch/issues/149623 - Issue Tracking, Vendor Advisory
References () https://github.com/pytorch/pytorch/issues/149623#issue-2935703015 - () https://github.com/pytorch/pytorch/issues/149623#issue-2935703015 - Issue Tracking, Vendor Advisory
References () https://vuldb.com/?ctiid.302049 - () https://vuldb.com/?ctiid.302049 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.302049 - () https://vuldb.com/?id.302049 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.524197 - () https://vuldb.com/?submit.524197 - Third Party Advisory, VDB Entry

31 Mar 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-31 15:15

Updated : 2025-05-29 15:53

NVD link : CVE-2025-3000

Mitre link : CVE-2025-3000

CVE.ORG link : CVE-2025-3000

JSON object : View

Products Affected

linuxfoundation

  • pytorch
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer