---
id: CVE-2025-3000
aliases:
  - GHSA-rrmf-rvhw-rf47
  - BIT-pytorch-2025-3000
  - PYSEC-2025-194
title: >-
  PyTorch is vulnerable to memory corruption through its torch.jit.script
  function
summary: >-
  PyTorch is vulnerable to memory corruption through its torch.jit.script
  function
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'
vendor: torch
product: torch
ecosystem: pip
affected:
  - torch < 2.13.0
patched:
  - torch 2.13.0
published: '2025-03-31'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T03:49:48.419046410Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-rrmf-rvhw-rf47'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-3000'
  - url: 'https://github.com/pytorch/pytorch/issues/149623'
  - url: 'https://github.com/pytorch/pytorch/issues/149623#issue-2935703015'
  - url: >-
      https://github.com/pytorch/pytorch/commit/b90c94991cdf8b87c8f7439f79518e0ef2c4ca4f
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-194.yaml
  - url: 'https://github.com/pytorch/pytorch'
  - url: 'https://vuldb.com/?ctiid.302049'
  - url: 'https://vuldb.com/?id.302049'
  - url: 'https://vuldb.com/?submit.524197'
  - url: 'https://github.com/advisories/GHSA-rrmf-rvhw-rf47'
tags:
  - osv
  - pip
epss: 0.00199
epssPercentile: 0.0995
ingestedAt: '2026-07-13T18:58:06.517Z'
---

## Overview

A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

## Affected packages

- `torch < 2.13.0`

## Remediation

Upgrade to a patched release:

- `torch 2.13.0`