{"data":{"id":"bc1f5b58-ad29-4c34-865e-5523d853e1ef","title":"CVE-2025-3000: A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The…","summary":"CVE-2025-3000 is a vulnerability classified as critical in PyTorch 2.6.0, affecting the function torch.jit.script. Manipulation leads to memory corruption, and an attack can be launched on the local host. The exploit has been publicly disclosed and may be used. The NVD assessment is not yet provided, while VulDB rates it CVSS 4.0 4.8 MEDIUM.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-3000","publishedAt":"2025-03-31T19:15:46.297Z","cveId":"CVE-2025-3000","cweIds":["CWE-119"],"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["torch@<= 2.12.1 (fixed: 2.13.0)"],"affectedPackageNames":["torch"],"affectedPackageRefs":["pypi:torch"],"affectedVendors":[],"affectedVendorsRaw":["PyTorch","PyTorch 2.6.0","torch.jit.script"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"PyTorch memory corruption in torch.jit.script reachable from the local host","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00203,"epssCheckedAt":"2026-11-04T18:09:12.821Z","kevDateAdded":null,"advisoryAliases":["GHSA-rrmf-rvhw-rf47"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:54:04.142Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2026-07-08T16:01:59.348Z","daysToFix":464,"fixCheckedAt":"2026-10-29T21:44:48.485Z","capecIds":["CAPEC-100"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"torch","fixedVersion":"2.13.0","matchedVersion":"2.13.0","fixReleasedAt":"2026-07-08T16:01:59.348Z","daysToFix":464,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:44:48.333Z"}]}}