PyTorch is vulnerable to memory corruption through its torch.jit.script function

GHSA-rrmf-rvhw-rf47 · BIT-pytorch-2025-3000 · CVE-2025-3000 · PYSEC-2025-194 · 갱신 2026. 9. 10.

해야 할 일

torch: 2.13.0 이상으로 올리세요.

영향 받는 패키지

생태계	패키지	수정 버전
PyPI	torch	2.13.0

원문

PyTorch is vulnerable to memory corruption through its torch.jit.script function

A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

출처

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-3000
WEBhttps://github.com/pytorch/pytorch/issues/149623
WEBhttps://github.com/pytorch/pytorch/issues/149623#issue-2935703015
WEBhttps://github.com/pytorch/pytorch/commit/b90c94991cdf8b87c8f7439f79518e0ef2c4ca4f
WEBhttps://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-194.yaml
PACKAGEhttps://github.com/pytorch/pytorch
WEBhttps://vuldb.com/?ctiid.302049
WEBhttps://vuldb.com/?id.302049
WEBhttps://vuldb.com/?submit.524197

오늘 목록으로

PyTorch is vulnerable to memory corruption through its torch.jit.script function (GHSA-rrmf-rvhw-rf47) · Sieve