GitHub Advisoryadvisory · PyPI

GHSA-rrmf-rvhw-rf47 PyTorch is vulnerable to memory corruption through its torch.jit.script function

LOW Published 2025-03-31 Modified 2026-07-17 Official page ↗
Aliases
CVE-2025-3000
Ecosystem
PyPI
Packages
torch
Severity
Low
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-119
Reviewed
2026-06-10

Affected packages

• PyPI torch: < 2.13.0 → fixed in 2.13.0

Description

A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Related

Alias · CVE (1)

  • CVE-2025-3000 A vulnerability classified as critical has been found in PyTorch 2.6.0. vulnerability

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References