4.8
Medium
CVE-2025-2998 A vulnerability was found in PyTorch 2.6.0
Description
A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PyTorch | 2.6.0 | No fix stated |
References
- VDB-302047 | PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption vuldb.com
- VDB-302047 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #524151 | pytorch torch 2.6.0 Segmentation fault vuldb.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of PyTorch
The 12 CVEs of PyTorch →
CVE-2026-4538
A vulnerability was identified in PyTorch 2.10.0
4.8
Medium
CVE-2025-4287
A vulnerability was found in PyTorch 2.6.0+cu124
4.8
Medium
CVE-2025-3730
A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0
4.8
Medium
CVE-2025-3136
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0
4.8
Medium