Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to memory corruption issues in PyTorch (CVE-2025-3001)

Summary IBM Watson Speech Services Cartridge is vulnerable to memory corruption issues in PyTorch due to flaws in function torch.lstmcell. PyTorch is used in our Speech runtimes. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability Details...

EUVD-2025-8856

Malicious code in bioql PyPI...

CVE-2025-3001

A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstmcell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used...

CVE-2025-3001: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstmcell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used...