~ / search / GHSA-f4hp-rmr7-r7v8

GHSA-f4hp-rmr7-r7v8

PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-2998

Packages

EcosystemPackageAffectedFixed in
PyPI torch <= 2.6.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

References

External links from the advisory. They lead to third-party sites.