Skip to content
OpenAdvisories
Medium WID-SEC-2025-0666 4 CVEs

PyTorch: Mehrere Schwachstellen ermöglichen Codeausführung

Published Mar 31, 2025 · Updated Mar 31, 2025 · de-DE

Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in PyTorch ausnutzen, um beliebigen Programmcode auszuführen.

Product

PyTorch ist eine Tensor-Bibliothek für Deep Learning mit GPUs und CPUs.

Vulnerabilities 4

  • Medium 5.3
    CVE-2025-2998

    PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption

    A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory corruption. Local access is required to approach this attack.…

    pytorch pytorch torch Debian Ubuntu PyPI
  • Medium 5.3
    CVE-2025-2999

    PyTorch torch.nn.utils.rnn.unpack_sequence memory corruption

    A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclos…

    pytorch pytorch torch Debian Ubuntu PyPI
  • Medium 5.3
    CVE-2025-3000

    PyTorch torch.jit.script memory corruption

    A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi…

    open-webui pytorch pytorch torch Debian Ubuntu Wolfi PyPI
  • Medium 5.3
    CVE-2025-3001

    PyTorch torch.lstm_cell memory corruption

    A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public an…

    pytorch pytorch pytorch torch Debian Ubuntu Azure Linux PyPI

Revision history

  1. #1

    Initiale Fassung

References