CVE-2025-2148CWE-119

PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption

Low · published March 10, 2025

CVSS v4.0
2.3
EPSS
0%
Percentile
36.9
In the wild
Unconfirmed
What it is

A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler._call_end_callbacks_on_jit_fut of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00437 · 36.9th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-03-10T12:00Z
EPSS history
Timeline
  • 10 MAR 12:00Z
    PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption
    cvelistv5