CVE-2025-3136CWE-119

PyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_allocator_delete memory corruption

Medium · published April 3, 2025

CVSS v4.0
4.8
EPSS
0%
Percentile
17.1
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00262 · 17.1th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-04-03T03:31Z
EPSS history
Timeline
  • 03 APR 03:31Z
    PyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_allocator_delete memory corruption
    cvelistv5