Skip to content
Advisories.
PyTorchGHSA-rrmf-rvhw-rf47

PyTorch is vulnerable to memory corruption through its torch.jit.script function

Low5.3CVE-2025-3000 · Published Mar 31, 2025 · updated Sep 10, 2026

GitHub advisory

Affected versions

PackageAffectedFixed in
torch
PyPI
< 2.13.02.13.0
Details and references

A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Severity from
GitHub (reviewed advisory)
Weakness
CWE-119
Also known as
BIT-pytorch-2025-3000, CVE-2025-3000, PYSEC-2025-194

More PyTorch advisories

All PyTorch
DateAdvisory
Mar 302025PyTorch susceptible to local Denial of Service
CVE-2025-2953Low3.3fixed in 2.7.1-rc1
Mar 312025PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function
CVE-2025-2998Medium5.3no fix yet
Mar 312025PyTorch is vulnerable to memory corruption through its unpack_sequence function
CVE-2025-2999Medium5.3fixed in 2.9.1
Mar 312025PyTorch is vulnerable to memory corruption through its torch.lstm_cell function
CVE-2025-3001Low5.3fixed in 2.10.0
Apr 22025A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
CVE-2025-3121Medium5.5no fix yet
Apr 32025A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The ex
CVE-2025-3136Low3.3no fix yet

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.