{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.6.0-NA"}],"component":"torch","cve_ids":["CVE-2025-3121"],"ecosystem":"PyPI","epss":0.00272,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGP48GTZB9M9KC5AD348TF","modified_at":"2026-05-21T15:00:29.127256430Z","published_at":"2025-04-02T22:15:21.220Z","references":["https://osv.dev/vulnerability/PYSEC-2025-196","https://vuldb.com/?id.303012","https://github.com/pytorch/pytorch/issues/149800","https://github.com/pytorch/pytorch/issues/149800#issue-2940240700","https://vuldb.com/?ctiid.303012","https://vuldb.com/?submit.525049"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"PYSEC-2025-196","url":"https://osv.dev/vulnerability/PYSEC-2025-196"}],"summary":"A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. The manipulation leads to memory corruption. Local access is r"}