AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

PyTorchGHSA-x3gm-94wq-g975

A vulnerability was found in PyTorch 2.6.0+cu124

PyTorch

CVE-2025-2149 · Published Mar 10, 2025 · updated Jun 9, 2026

Low2.5
No fix yet
GitHub advisory

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zero_point leads to improper initialization. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.

Affected versions

PackageAffectedFixed in
torch
PyPI
<= 2.6.0No fix yet
Details and references

More PyTorch advisories

All PyTorch