CVE-2025-3001 in PyTorch

Sumário

de MITRE • 31/03/2025

A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsável: VulDB
• Divulgação: 31/03/2025
• Moderação: aceite
• Entrada: VDB-302050
• CPE: pronto
• CWE: CWE-119 (confirmado)
• Exploração: Descarregar
• CVSS: 5.3 (VulDB)
• EPSS: 0.00189
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-3001
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-3001
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-3001/