{"id":"CVE-2025-3001","aliases":["BIT-pytorch-2025-3001","GHSA-qfhq-4f3w-5fph","PYSEC-2025-195"],"url":"https://o3.security/vulnerability/CVE-2025-3001","summary":"PyTorch torch.lstm_cell memory corruption","details":"A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.\n\nA patch is available through commit [999d94b](https://github.com/pytorch/pytorch/commit/999d94b5ede5f4ec111ba7dd144129e2c2725b03).","published":"2025-03-31T15:31:05.008Z","modified":"2026-10-28T02:30:29.569840278Z","cvss":null,"epss":{"score":0.00189,"percentile":0.0854,"asOf":"2026-08-24"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"torch","fixedVersion":"2.10.0"}],"fix":{"url":"https://github.com/pytorch/pytorch/commit/999d94b5ede5f4ec111ba7dd144129e2c2725b03","label":"pytorch/pytorch@999d94b"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/3xxx/CVE-2025-3001.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3001"},{"type":"ADVISORY","url":"https://vuldb.com/?id.302050"},{"type":"ADVISORY","url":"https://vuldb.com/?submit.524212"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/149626"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/149626#issue-2935860995"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.302050"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/commit/999d94b5ede5f4ec111ba7dd144129e2c2725b03"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-195.yaml"},{"type":"PACKAGE","url":"https://github.com/pytorch/pytorch"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-28T02:30:29.569840278Z"}}