CVE-2025-3121
1 advisory.
PyPI/torch CVE-2025-3121: medium 5.5, EPSS 0.27%
A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. The manipulation leads to memory corruption. Local access is r
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.6.0-NA |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-196
- https://vuldb.com/?id.303012
- https://github.com/pytorch/pytorch/issues/149800
- https://github.com/pytorch/pytorch/issues/149800#issue-2940240700
- https://vuldb.com/?ctiid.303012
- https://vuldb.com/?submit.525049
CVE-2025-3121 · published · modified · JSON