CVE-2025-2148 PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption

🗓️ 10 Mar 2025 12:00:07Reported by VulDBType

Critical memory corruption vulnerability identified in PyTorch Tuple Handler affecting version 2.6.0+cu124.

Reporter	Title	Published	Views	Family All 26
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl	22 Oct 202511:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl	20 Sep 202511:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affecting IBM Knowledge Catalog for IBM Cloud Pak for Data	13 May 202618:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl	22 Oct 202511:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl	11 Nov 202516:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem	22 Jul 202512:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch	9 May 202509:01	–	ibm
Circl	CVE-2025-2148	10 Mar 202514:38	–	circl
CNNVD	PyTorch 缓冲区错误漏洞	10 Mar 202500:00	–	cnnvd
CVE	CVE-2025-2148	10 Mar 202512:00	–	cve

[
  {
    "vendor": "n/a",
    "product": "PyTorch",
    "versions": [
      {
        "version": "2.6.0+cu124",
        "status": "affected"
      }
    ],
    "modules": [
      "Tuple Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/pytorch/pytorch/issues/147722

10 Mar 2025 12:00Current

CVSS 42.3

CVSS 3.15

CVSS 35

CVSS 25.1

EPSS0.00428

CWE-119