CVE-2025-3136

MEDIUM EPSS 13.2%

Published Apr 3, 20251y ago · Modified Jun 17, 20261w ago

4.8 CVSS 4.0

Medium

Published Apr 3, 2025 1y ago

Last Modified Jun 17, 2026 1w ago

Description

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

CVSS Details

Base Score

4.8

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope X

Threat Intelligence

EPSS Exploit Probability

13.2% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 2

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety

CWE-787 Out-of-bounds Write Memory Safety

Affected Products 1

Vendor	Product	Version	Range
linuxfoundation	pytorch	2.6.0	any

References 7

github.com https://github.com/ARPANET-cybersecurity/vuldb/issues/2

Not Applicable
github.com https://github.com/pytorch/pytorch/issues/149821

ExploitIssue TrackingVendor Advisory
github.com https://github.com/pytorch/pytorch/issues/149821#issue-2940838975

ExploitIssue TrackingVendor Advisory
github.com https://github.com/pytorch/pytorch/issues/149821#issuecomment-2765311086

ExploitIssue TrackingVendor Advisory
vuldb.com https://vuldb.com/?ctiid.303041

Permissions RequiredVDB Entry
vuldb.com https://vuldb.com/?id.303041

Third Party AdvisoryVDB Entry
vuldb.com https://vuldb.com/?submit.525252

ExploitThird Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.