CVE-2025-2149: PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization
A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnqSigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zeropoint leads to improper initialization. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2149?
CVE-2025-2149 is rated as problematic due to improper initialization in the Quantized Sigmoid Module.
How do I fix CVE-2025-2149?
To fix CVE-2025-2149, update PyTorch to the latest version that addresses this vulnerability.
What component is affected by CVE-2025-2149?
CVE-2025-2149 affects the nnq_Sigmoid function of the Quantized Sigmoid Module.
What software versions are impacted by CVE-2025-2149?
CVE-2025-2149 impacts PyTorch version 2.6.0 and onwards with CUDA 124.
What type of attack is associated with CVE-2025-2149?
CVE-2025-2149 allows manipulation of the scale and zero_point arguments, leading to potential exploitation.