Skip to content
Advisories.
PyTorchGHSA-f4hp-rmr7-r7v8

PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function

Medium5.3CVE-2025-2998 · Published Mar 31, 2025 · updated Jun 9, 2026

GitHub advisory

Affected versions

PackageAffectedFixed in
torch
PyPI
<= 2.6.0No fix yet
Details and references

A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Severity from
GitHub (reviewed advisory)
Weakness
CWE-119
Also known as
BIT-pytorch-2025-2998, CVE-2025-2998, PYSEC-2025-192

More PyTorch advisories

All PyTorch
DateAdvisory
Mar 302025PyTorch susceptible to local Denial of Service
CVE-2025-2953Low3.3fixed in 2.7.1-rc1
Mar 312025PyTorch is vulnerable to memory corruption through its torch.jit.script function
CVE-2025-3000Low5.3fixed in 2.13.0
Mar 312025PyTorch is vulnerable to memory corruption through its unpack_sequence function
CVE-2025-2999Medium5.3fixed in 2.9.1
Mar 312025PyTorch is vulnerable to memory corruption through its torch.lstm_cell function
CVE-2025-3001Low5.3fixed in 2.10.0
Apr 22025A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
CVE-2025-3121Medium5.5no fix yet
Apr 32025A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The ex
CVE-2025-3136Low3.3no fix yet

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.