CVE-2025-3121: PyTorch torch.jit.jit_module_from_flatbuffer memory corruption
Published Apr 2, 2025
·Updated
A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jitmodulefromflatbuffer. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
PyTorch PyTorch
linuxfoundation Pytorch Python=2.6.0
Event History
Apr 2, 2025
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-3121?
CVE-2025-3121 is classified as a problematic vulnerability due to its potential to cause memory corruption.
2
How do I fix CVE-2025-3121?
To fix CVE-2025-3121, update PyTorch to the latest version that addresses this memory corruption issue.
3
What versions of PyTorch are affected by CVE-2025-3121?
CVE-2025-3121 affects PyTorch version 2.6.0.
4
What type of access is required to exploit CVE-2025-3121?
Local access is required to exploit CVE-2025-3121.
5
What is the nature of the vulnerability described in CVE-2025-3121?
CVE-2025-3121 involves memory corruption through improper handling in the function torch.jit.jit_module_from_flatbuffer.