21cmpsdenoiser (>=1.0.0, <=1.0.2), 2404-segmentation-pipeline (>=0.1.0, <=1.0.0) +28224 more potentially affected by CVE-2025-3001 via torch (>=1.0.0, <=2.14.0)

🗓️ 31 Mar 2025 15:43:42Reported by Vulners OSVType

torch (PYPI) version >=1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =2.13.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1,

Reporter	Title	Published	Views	Family All 55
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl	20 Sep 202511:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl	22 Oct 202511:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem	22 Jul 202512:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application suite Visual Inspection Component uses pytorch v2.8.0 which is vulnerable to multiple CVEs CVE-2025-55552, CVE-2025-55551, CVE-2025-3001.	3 Mar 202615:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption.	9 May 202509:03	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak	8 Jun 202613:47	–	ibm
CBLMariner	CVE-2025-3001 affecting package pytorch for versions less than 2.0.0-12	5 Feb 202622:21	–	cbl_mariner
CBLMariner	CVE-2025-3001 affecting package pytorch for versions less than 2.2.2-10	12 Jan 202621:27	–	cbl_mariner
Circl	CVE-2025-3001	31 Mar 202519:12	–	circl
CNNVD	PyTorch 缓冲区错误漏洞	31 Mar 202500:00	–	cnnvd

01 Apr 2025 01:12Current

CVSS 24.3

CVSS 44.8

CVSS 3.15.3

CVSS 35.3

EPSS0.00198

SSVC