BIT-pytorch-2025-3000

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/pytorch/BIT-pytorch-2025-3000.json
JSON Data
https://api.test.osv.dev/v1/vulns/BIT-pytorch-2025-3000
Aliases
Published
2025-05-30T05:57:02.547Z
Modified
2025-05-30T06:44:26.724473Z
Summary
PyTorch torch.jit.script memory corruption
Details

A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Database specific
{
    "cpes": [
        "cpe:2.3:a:linuxfoundation:pytorch:*:*:*:*:*:python:*:*"
    ],
    "severity": "Medium"
}
References

Affected packages

Bitnami / pytorch

Package

Name
pytorch
Purl
pkg:bitnami/pytorch

Severity

  • 4.8 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
2.6.0
Fixed
2.7.0