{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.6.0"}],"component":"torch","cve_ids":["CVE-2025-2148"],"ecosystem":"PyPI","epss":0.00437,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c678-jfcj-6jmf","id":"tcs_01M5KFCAFJSKBB93R33R8955MR","modified_at":"2026-06-09T21:26:06.844649427Z","published_at":"2025-03-10T12:30:55Z","references":["https://osv.dev/vulnerability/GHSA-c678-jfcj-6jmf","https://nvd.nist.gov/vuln/detail/CVE-2025-2148","https://github.com/pytorch/pytorch/issues/147722","https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-189.yaml","https://github.com/pytorch/pytorch","https://github.com/pytorch/pytorch/blob/b0a67c7495bb11ecb23e556058db059ba48354af/torch/autograd/profiler.py#L990","https://vuldb.com/?ctiid.299059","https://vuldb.com/?id.299059","https://vuldb.com/?submit.505959"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-c678-jfcj-6jmf","url":"https://osv.dev/vulnerability/GHSA-c678-jfcj-6jmf"}],"summary":"PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument"}