CVE-2025-3136

Katalog CVE

CVSS 3.3 · Low EPSS 0,26%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada linuxfoundation pytorch. Skor CVSS 3.1 3.3 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

3 April 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.3 (Low), sumber vuldb.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/pytorch/pytorch/issues/149821 exploit · issue tracking · advisory vendor
• https://github.com/pytorch/pytorch/issues/149821#issue-2940838975 exploit · issue tracking · advisory vendor
• https://github.com/pytorch/pytorch/issues/149821#issuecomment-2765311086 exploit · issue tracking · advisory vendor
• https://vuldb.com/?id.303041 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.525252 exploit · advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.303041 permissions required · vdb entry
• https://github.com/ARPANET-cybersecurity/vuldb/issues/2 not applicable