{"data":{"id":"8f9e49a6-05c0-4546-899c-cb48e5e1b3d0","title":"CVE-2025-3730: A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Affected is the function…","summary":"A problematic vulnerability in PyTorch 2.6.0 affects the function torch.nn.functional.ctc_loss in aten/src/ATen/native/LossCTC.cpp. Manipulating it leads to denial of service, and an attack must be carried out locally. The exploit is public, though the vulnerability's real existence is still doubted.","solution":"It is recommended to apply the patch 46fc5d8e360127361211cb237d5f9eef0223e567 to fix this issue.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-3730","publishedAt":"2025-04-17T01:15:48.700Z","cveId":"CVE-2025-3730","cweIds":["CWE-404"],"cvssScore":"3.3","cvssSeverity":"low","severity":"low","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["torch@<= 2.7.1 (fixed: 2.8.0)"],"affectedPackageNames":["torch"],"affectedPackageRefs":["pypi:torch"],"affectedVendors":[],"affectedVendorsRaw":["PyTorch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"PyTorch denial of service in ctc_loss via local manipulation","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00331,"epssCheckedAt":"2026-11-04T12:08:34.077Z","kevDateAdded":null,"advisoryAliases":["GHSA-887c-mr87-cxwp"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:53:56.530Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-08-06T14:53:10.919Z","daysToFix":111,"fixCheckedAt":"2026-10-29T21:44:40.442Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"torch","fixedVersion":"2.8.0","matchedVersion":"2.8.0","fixReleasedAt":"2025-08-06T14:53:10.919Z","daysToFix":111,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:44:40.291Z"}]}}