Description
A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler._call_end_callbacks_on_jit_fut of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult.
Published: 2025-03-10
Score: 2.3 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-7522 A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler._call_end_callbacks_on_jit_fut of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult.
History

Tue, 24 Feb 2026 20:00:00 +0000

Type Values Removed Values Added
First Time appeared Linuxfoundation
Linuxfoundation pytorch
CPEs cpe:2.3:a:pytorch:pytorch:2.6.0\+cu124:*:*:*:*:*:*:* cpe:2.3:a:linuxfoundation:pytorch:2.6.0:cu124:*:*:*:python:*:*
Vendors & Products Pytorch
Pytorch pytorch
Linuxfoundation
Linuxfoundation pytorch

Mon, 23 Jun 2025 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Pytorch
Pytorch pytorch
CPEs cpe:2.3:a:pytorch:pytorch:2.6.0\+cu124:*:*:*:*:*:*:*
Vendors & Products Pytorch
Pytorch pytorch

Mon, 10 Mar 2025 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 10 Mar 2025 12:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler._call_end_callbacks_on_jit_fut of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult.
Title PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption
Weaknesses CWE-119
References
Metrics cvssV2_0

{'score': 5.1, 'vector': 'AV:N/AC:H/Au:N/C:P/I:P/A:P'}

cvssV3_0

{'score': 5, 'vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L'}

cvssV3_1

{'score': 5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L'}

cvssV4_0

{'score': 2.3, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N'}

Subscriptions

Linuxfoundation Pytorch
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2025-03-10T14:10:36.958Z

Reserved: 2025-03-10T06:12:36.829Z

Link: CVE-2025-2148

cve-icon Vulnrichment

Updated: 2025-03-10T14:10:20.799Z

cve-icon NVD

Status : Analyzed

Published: 2025-03-10T12:15:12.617

Modified: 2026-02-24T19:52:04.730

Link: CVE-2025-2148

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses