CVE-2025-3000: PyTorch torch.jit.script memory corruption
Published Mar 31, 2025
·Updated
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
PyTorch PyTorch
linuxfoundation Pytorch Python=2.6.0
Event History
Mar 31, 2025
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-3000?
CVE-2025-3000 is classified as a critical vulnerability.
2
How does CVE-2025-3000 affect PyTorch 2.6.0?
CVE-2025-3000 affects the torch.jit.script function, leading to memory corruption.
3
Can CVE-2025-3000 be exploited remotely?
No, CVE-2025-3000 can only be exploited on the local host.
4
What is the impact of exploiting CVE-2025-3000?
Exploiting CVE-2025-3000 can lead to memory corruption, which may compromise system stability or security.
5
How can I mitigate CVE-2025-3000?
To mitigate CVE-2025-3000, it is recommended to upgrade to a later version of PyTorch that addresses this vulnerability.