Skip to content
PyTorchPYSEC-2025-197

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The ex

Low3.3CVE-2025-3136 · Published Apr 3, 2025 · updated May 21, 2026

Source advisory

Affected versions

PackageAffectedFixed in
torch
PyPI
<= 2.6.0-NANo fix yet

Changes since it was listed

DateChange
Sep 24Severity: Unrated to Low
Details and references

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Severity from
NVD
Also known as
BIT-pytorch-2025-3136, CVE-2025-3136

More PyTorch advisories

All PyTorch

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.