CVE-2025-3000: linuxfoundation pytorch

CVSS: 5.3v3.1MediumAnalyzed

AliasesGHSA-rrmf-rvhw-rf47BIT-pytorch-2025-3000PYSEC-2025-194+134 more

Published 31-03-2025Last modified 31-03-2025

Vulnerability summary

CVE-2025-3000 is a medium (CVSS 5.3) vulnerability in linuxfoundation pytorch. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.3/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.20%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1github

Advisory lineage

Upstream 0 · Downstream 0 · Related 1

CGA-HJPF-WWV2-49V4

Timeline

31-03-2025
PublishedVulnerability first disclosed.
31-03-2025
Last modifiedVulnerability information updated.

Description

A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

CVSS metrics

13 scores · 7 sources · 4 versions

v4.04.8v3.15.3v3.05.3v2.04.3

EPSS trend

Probability

0.20%

Chance of exploitation in the next 30 days

Percentile

Versus all other CVEs

30-day change

0.00 pp

From 0.20% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.20%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

githubUnverified
Pytorch
Maturity: poc

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Chainguard51 products

kserve-huggingfaceserver-cuda-13.3All versions (No fix recorded)
lmcache-cuda-12.8All versions (No fix recorded)
lmcache-cuda-13.0< 0.5.3-r1
nemo< 2.7.3-r6
nemo-rl-cuda-13.0-torchAll versions (No fix recorded)

open-webui< 0.9.6-r5
py3.10-torch-2.3-cuda-12.4All versions (No fix recorded)
py3.10-torch-2.6-cuda-12.4All versions (No fix recorded)
py3.10-torch-2.7-cuda-12.8All versions (No fix recorded)
py3.10-torch-cuda-12.4< 2.12.1-r0
py3.10-torch-cuda-12.6< 2.12.1-r0
py3.10-torch-cuda-12.8< 2.12.1-r0
py3.10-torch-cuda-12.9< 2.12.1-r0
py3.10-torch-cuda-13.0< 2.12.1-r0
py3.11-torch-2.6-cuda-12.4All versions (No fix recorded)
py3.11-torch-2.7-cuda-12.8All versions (No fix recorded)
py3.11-torch-cuda-12.4< 2.12.0-r1 | < 2.12.1-r0
py3.11-torch-cuda-12.6< 2.12.1-r0 | < 2.12.0-r3
py3.11-torch-cuda-12.8< 2.12.0-r2 | < 2.12.1-r0
py3.11-torch-cuda-12.9< 2.12.0-r2 | < 2.12.1-r0
py3.11-torch-cuda-13.0< 2.12.0-r2 | < 2.12.1-r0
py3.11-torch-cuda-13.1< 2.12.0-r1 | < 2.12.1-r0
py3.11-torch-cuda-13.2< 2.12.1-r0 | < 2.12.0-r1
py3.11-torch-cuda-13.3< 2.12.1-r0
py3.12-torch-2.6-cuda-12.4All versions (No fix recorded)
py3.12-torch-2.7-cuda-12.8All versions (No fix recorded)
py3.12-torch-cuda-12.4< 2.12.1-r0 | < 2.12.0-r1
py3.12-torch-cuda-12.6< 2.12.1-r0 | < 2.12.0-r3
py3.12-torch-cuda-12.8< 2.12.1-r0 | < 2.12.0-r2
py3.12-torch-cuda-12.9< 2.12.0-r2 | < 2.12.1-r0
py3.12-torch-cuda-13.0< 2.12.0-r2 | < 2.12.1-r0
py3.12-torch-cuda-13.0-2.9All versions (No fix recorded)
py3.12-torch-cuda-13.1< 2.12.1-r0 | < 2.12.0-r1
py3.12-torch-cuda-13.2< 2.12.0-r1 | < 2.12.1-r0
py3.12-torch-cuda-13.3< 2.12.1-r0
py3.13-torch-2.6-cuda-12.4All versions (No fix recorded)
py3.13-torch-2.7-cuda-12.8All versions (No fix recorded)
py3.13-torch-cuda-12.4< 2.12.0-r1 | < 2.12.1-r0
py3.13-torch-cuda-12.6< 2.12.0-r3 | < 2.12.1-r0
py3.13-torch-cuda-12.8< 2.12.0-r2 | < 2.12.1-r0
py3.13-torch-cuda-12.9< 2.12.0-r2 | < 2.12.1-r0
py3.13-torch-cuda-13.0< 2.12.0-r2 | < 2.12.1-r0
py3.13-torch-cuda-13.1< 2.12.1-r0 | < 2.12.0-r1
py3.13-torch-cuda-13.2< 2.12.1-r0 | < 2.12.0-r1
py3.13-torch-cuda-13.3< 2.12.1-r0
tritonserver-backend-vllm-cuda-12.9All versions (No fix recorded)
tritonserver-backend-vllm-cuda-13.0< 25.11-r14
vllm-cuda-13.2< 0.27.1-r0
vllm-openai-cuda-12.9-nvidia-cusparseAll versions (No fix recorded)
vllm-openai-cuda-12.9-torch< 0.28.0-r0
vllm-openai-cuda-13.0-torch< 0.27.0-r0

Show all 51

Debian1 product

pytorchAll versions (No fix recorded)

Linuxfoundation1 product

pytorch2.6.0

PyPI1 product

torch< 2.13.0 | ≤ 2.6.0-NA

Ubuntu1 product

pytorchAll versions (No fix recorded)

Wolfi1 product

open-webui< 0.9.6-r5

6 vendors · 56 products

References

14 links

vuldb.com?id.302049VDB EntryTechnical DescriptionWEBAdvisoryREPORTThird Party Advisory
vuldb.com?ctiid.302049SignaturePermissions RequiredWEBREPORTVDB Entry
vuldb.com?submit.524197Third Party AdvisoryWEBAdvisoryREPORTVDB Entry
github.com/pytorch/pytorch/issues/149623Issue TrackingWEBREPORTVendor Advisory
github.com/pytorch/pytorch/issues/149623ExploitIssue TrackingWEBREPORTVendor Advisory
nvd.nist.gov/vuln/detail/CVE-2025-3000Advisory
github.com/pytorch/pytorch/commit/b90c94991cdf8b87c8f7439f79518e0ef2c4ca4fWEB
github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-194.yamlWEB
github.com/pytorch/pytorchPACKAGE
github.com/advisories/GHSA-rrmf-rvhw-rf47Advisory

Show all 14 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities