4.8
Medium
CVE-2025-3136 A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0
Description
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PyTorch | 2.6.0 | No fix stated |
References
- VDB-303041 | PyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_allocator_delete memory corruption vuldb.com
- VDB-303041 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #525252 | pytorch pytorch (in torch.cuda.memory.caching_allocator_delete) torch 2.6.0 invalid memory access vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of PyTorch
The 12 CVEs of PyTorch →
CVE-2026-4538
A vulnerability was identified in PyTorch 2.10.0
4.8
Medium
CVE-2025-4287
A vulnerability was found in PyTorch 2.6.0+cu124
4.8
Medium
CVE-2025-3730
A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0
4.8
Medium
CVE-2025-3121
A vulnerability classified as problematic has been found in PyTorch 2.6.0
4.8
Medium