CVE-2025-2999 PyTorch torch.nn.utils.rnn.unpack_sequence memory corruption

🗓️ 31 Mar 2025 14:31:04Reported by VulDBType

Critical memory corruption vulnerability in PyTorch 2.6.0's unpack_sequence function disclosed publicly.

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	2 Mar 202606:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses PyTorch 2.6.0 which is vulnerable to CVE-2025-2998, CVE-2025-2999, CVE-2025-55552,CVE-2025-63396,CVE-2025-55551	2 Mar 202613:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl	20 Sep 202511:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl	22 Oct 202511:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem	22 Jul 202512:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption.	9 May 202509:03	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak	8 Jun 202613:47	–	ibm
Circl	CVE-2025-2999	31 Mar 202515:31	–	circl
CNNVD	PyTorch 缓冲区错误漏洞	31 Mar 202500:00	–	cnnvd
CNVD	PyTorch torch.nn.utils.rnn.unpack_sequence function buffer overflow vulnerability	9 Apr 202500:00	–	cnvd

[
  {
    "vendor": "n/a",
    "product": "PyTorch",
    "versions": [
      {
        "version": "2.6.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/pytorch/pytorch/issues/149622
vuldb	www.vuldb.com/
github	www.github.com/pytorch/pytorch/issues/149622
vuldb	www.vuldb.com/

31 Mar 2025 14:31Current

CVSS 24.3

CVSS 44.8

CVSS 3.15.3

CVSS 35.3

EPSS0.00161

CWE-119