PT-2025-13774 · Pytorch +1 · Pytorch +1

🗓️ 31 Mar 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Critical issue in PyTorch 2.6.0 affecting pad packed sequence function, can cause memory corruption.

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	2 Mar 202606:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses PyTorch 2.6.0 which is vulnerable to CVE-2025-2998, CVE-2025-2999, CVE-2025-55552,CVE-2025-63396,CVE-2025-55551	2 Mar 202613:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl	20 Sep 202511:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl	22 Oct 202511:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch	9 May 202509:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem	22 Jul 202512:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption.	9 May 202509:03	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak	14 May 202613:47	–	ibm
Circl	CVE-2025-2998	31 Mar 202514:32	–	circl
CNNVD	PyTorch 缓冲区错误漏洞	31 Mar 202500:00	–	cnnvd

Source	Link
github	www.github.com/pytorch/pytorch/issues/149622
github	www.github.com/pytorch/pytorch/issues/149622
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-2998
osv	www.osv.dev/vulnerability/BIT-pytorch-2025-2998
security-tracker	www.security-tracker.debian.org/tracker/source-package/pytorch
cve	www.cve.org/CVERecord
security-tracker	www.security-tracker.debian.org/tracker/CVE-2025-2998
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2025-2998
ubuntu	www.ubuntu.com/security/CVE-2025-2998
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

30 May 2025 00:00Current

5Medium risk

Vulners AI Score5

CVSS 3.15.3

CVSS 24.3

CVSS 44.8

CVSS 35.3

EPSS0.00124

SSVC