PyPI/torch CVE-2025-3000: medium 5.3, EPSS 0.20%

PyTorch is vulnerable to memory corruption through its torch.jit.script function

Action: Upgrade torch to 2.13.0 or later.

pip install torch==2.13.0

Affected

Fixed versions

Sources

• osv: GHSA-rrmf-rvhw-rf47
• https://nvd.nist.gov/vuln/detail/CVE-2025-3000
• https://github.com/pytorch/pytorch/issues/149623
• https://github.com/pytorch/pytorch/issues/149623#issue-2935703015
• https://github.com/pytorch/pytorch/commit/b90c94991cdf8b87c8f7439f79518e0ef2c4ca4f
• https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-194.yaml
• https://github.com/pytorch/pytorch
• https://vuldb.com/?ctiid.302049
• https://vuldb.com/?id.302049
• https://vuldb.com/?submit.524197

CVE-2025-3000 · published 2025-03-31T15:30:48Z · modified 2026-09-10T03:49:48.419046410Z · JSON