CVE-2025-3001 in PyTorch

Resumen

por MITRE • 2025-03-31

A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: VulDB
• Divulgación: 2025-03-31
• Moderación: aceptado
• Artículo: VDB-302050
• CPE: listo
• CWE: CWE-119 (confirmado)
• Explotación: Descargar
• CVSS: 5.3 (VulDB)
• EPSS: 0.00189
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-3001
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-3001
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-3001/