{"id":"CVE-2025-3000","aliases":["GHSA-rrmf-rvhw-rf47","BIT-pytorch-2025-3000","PYSEC-2025-194"],"title":"PyTorch is vulnerable to memory corruption through its torch.jit.script function","summary":"PyTorch is vulnerable to memory corruption through its torch.jit.script function","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","vendor":"torch","product":"torch","ecosystem":"pip","affected":["torch < 2.13.0"],"patched":["torch 2.13.0"],"published":"2025-03-31","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:49:48.419046410Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-rrmf-rvhw-rf47","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3000"},{"url":"https://github.com/pytorch/pytorch/issues/149623"},{"url":"https://github.com/pytorch/pytorch/issues/149623#issue-2935703015"},{"url":"https://github.com/pytorch/pytorch/commit/b90c94991cdf8b87c8f7439f79518e0ef2c4ca4f"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-194.yaml"},{"url":"https://github.com/pytorch/pytorch"},{"url":"https://vuldb.com/?ctiid.302049"},{"url":"https://vuldb.com/?id.302049"},{"url":"https://vuldb.com/?submit.524197"},{"url":"https://github.com/advisories/GHSA-rrmf-rvhw-rf47"}],"tags":["osv","pip"],"epss":0.00199,"epssPercentile":0.0995,"ingestedAt":"2026-07-13T18:58:06.517Z","slug":"CVE-2025-3000","body":"## Overview\n\nA vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.\n\n## Affected packages\n\n- `torch < 2.13.0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `torch 2.13.0`","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201406,"id":"CVE-2025-3000","ts":1789399413200,"field":"cvss","old":null,"new":"5.3"},{"seq":201405,"id":"CVE-2025-3000","ts":1789399413200,"field":"severity","old":"none","new":"medium"},{"seq":200141,"id":"CVE-2025-3000","ts":1789396815427,"field":"cvss","old":"5.3","new":null},{"seq":200140,"id":"CVE-2025-3000","ts":1789396815427,"field":"severity","old":"medium","new":"none"},{"seq":196937,"id":"CVE-2025-3000","ts":1789384252405,"field":"cvss","old":null,"new":"5.3"},{"seq":196936,"id":"CVE-2025-3000","ts":1789384252405,"field":"severity","old":"none","new":"medium"},{"seq":195864,"id":"CVE-2025-3000","ts":1789383232563,"field":"cvss","old":"5.3","new":null},{"seq":195863,"id":"CVE-2025-3000","ts":1789383232563,"field":"severity","old":"medium","new":"none"},{"seq":194792,"id":"CVE-2025-3000","ts":1789380230911,"field":"cvss","old":null,"new":"5.3"},{"seq":194791,"id":"CVE-2025-3000","ts":1789380230911,"field":"severity","old":"none","new":"medium"},{"seq":193580,"id":"CVE-2025-3000","ts":1789378098997,"field":"cvss","old":"5.3","new":null},{"seq":193579,"id":"CVE-2025-3000","ts":1789378098997,"field":"severity","old":"medium","new":"none"},{"seq":192366,"id":"CVE-2025-3000","ts":1789376149891,"field":"cvss","old":null,"new":"5.3"},{"seq":192365,"id":"CVE-2025-3000","ts":1789376149891,"field":"severity","old":"none","new":"medium"},{"seq":191154,"id":"CVE-2025-3000","ts":1789372948627,"field":"cvss","old":"5.3","new":null},{"seq":191153,"id":"CVE-2025-3000","ts":1789372948627,"field":"severity","old":"medium","new":"none"},{"seq":189938,"id":"CVE-2025-3000","ts":1789369068731,"field":"cvss","old":null,"new":"5.3"},{"seq":189937,"id":"CVE-2025-3000","ts":1789369068731,"field":"severity","old":"none","new":"medium"},{"seq":188726,"id":"CVE-2025-3000","ts":1789367915783,"field":"cvss","old":"5.3","new":null},{"seq":188725,"id":"CVE-2025-3000","ts":1789367915783,"field":"severity","old":"medium","new":"none"},{"seq":187508,"id":"CVE-2025-3000","ts":1789364912003,"field":"cvss","old":null,"new":"5.3"},{"seq":187507,"id":"CVE-2025-3000","ts":1789364912003,"field":"severity","old":"none","new":"medium"},{"seq":186296,"id":"CVE-2025-3000","ts":1789362857665,"field":"cvss","old":"5.3","new":null},{"seq":186295,"id":"CVE-2025-3000","ts":1789362857665,"field":"severity","old":"medium","new":"none"},{"seq":185081,"id":"CVE-2025-3000","ts":1789360898062,"field":"cvss","old":null,"new":"5.3"},{"seq":185080,"id":"CVE-2025-3000","ts":1789360898062,"field":"severity","old":"none","new":"medium"},{"seq":183869,"id":"CVE-2025-3000","ts":1789357762404,"field":"cvss","old":"5.3","new":null},{"seq":183868,"id":"CVE-2025-3000","ts":1789357762404,"field":"severity","old":"medium","new":"none"},{"seq":182121,"id":"CVE-2025-3000","ts":1789354035754,"field":"cvss","old":null,"new":"5.3"},{"seq":182120,"id":"CVE-2025-3000","ts":1789354035754,"field":"severity","old":"none","new":"medium"},{"seq":180914,"id":"CVE-2025-3000","ts":1789352795120,"field":"cvss","old":"5.3","new":null},{"seq":180913,"id":"CVE-2025-3000","ts":1789352795120,"field":"severity","old":"medium","new":"none"},{"seq":179707,"id":"CVE-2025-3000","ts":1789349909288,"field":"cvss","old":null,"new":"5.3"},{"seq":179706,"id":"CVE-2025-3000","ts":1789349909288,"field":"severity","old":"none","new":"medium"},{"seq":178500,"id":"CVE-2025-3000","ts":1789347644130,"field":"cvss","old":"5.3","new":null},{"seq":178499,"id":"CVE-2025-3000","ts":1789347644130,"field":"severity","old":"medium","new":"none"},{"seq":177293,"id":"CVE-2025-3000","ts":1789346099373,"field":"cvss","old":null,"new":"5.3"},{"seq":177292,"id":"CVE-2025-3000","ts":1789346099373,"field":"severity","old":"none","new":"medium"},{"seq":176086,"id":"CVE-2025-3000","ts":1789342590267,"field":"cvss","old":"5.3","new":null},{"seq":176085,"id":"CVE-2025-3000","ts":1789342590267,"field":"severity","old":"medium","new":"none"},{"seq":175872,"id":"CVE-2025-3000","ts":1789342197301,"field":"cvss","old":null,"new":"5.3"},{"seq":175871,"id":"CVE-2025-3000","ts":1789342197301,"field":"severity","old":"none","new":"medium"},{"seq":175410,"id":"CVE-2025-3000","ts":1789338225189,"field":"cvss","old":"5.3","new":null},{"seq":175409,"id":"CVE-2025-3000","ts":1789338225189,"field":"severity","old":"medium","new":"none"},{"seq":174205,"id":"CVE-2025-3000","ts":1789334537115,"field":"cvss","old":null,"new":"5.3"},{"seq":174204,"id":"CVE-2025-3000","ts":1789334537115,"field":"severity","old":"none","new":"medium"},{"seq":170628,"id":"CVE-2025-3000","ts":1789328216931,"field":"cvss","old":"5.3","new":null},{"seq":170627,"id":"CVE-2025-3000","ts":1789328216931,"field":"severity","old":"medium","new":"none"},{"seq":169423,"id":"CVE-2025-3000","ts":1789326818111,"field":"cvss","old":null,"new":"5.3"},{"seq":169422,"id":"CVE-2025-3000","ts":1789326818111,"field":"severity","old":"none","new":"medium"}]}