CVE-2025-2148

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler._call_end_callbacks_on_jit_fut of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	PyTorch	2.6.0+cu124

References

https://github.com/pytorch/pytorch/issues/147722Issue Tracking
https://vuldb.com/?ctiid.299059Permissions Required, VDB Entry
https://vuldb.com/?id.299059Third Party Advisory, VDB Entry
https://vuldb.com/?submit.505959Third Party Advisory, VDB Entry
https://github.com/pytorch/pytorch/issues/147722Issue Tracking

Timeline

Published: Mar 10, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-214808.6Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.CVE-2025-214817.8Memory corruption while performing private key encryption in trusted application.CVE-2025-214827.1Cryptographic issue while performing RSA PKCS padding decoding.CVE-2025-214839.8Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.CVE-2025-214848.2Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.CVE-2025-214857.8Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.CVE-2025-214867.8Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.CVE-2025-214878.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the availabl CVE-2025-214888.2Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.CVE-2025-214896.1Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions CVE-2025-21492.5A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of th CVE-2025-214904.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8