{"data":{"id":"db71261c-fd80-4e51-8d20-dac1891da505","title":"CVE-2025-2149: A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the…","summary":"CVE-2025-2149 is a flaw in the nnq_Sigmoid function of the Quantized Sigmoid Module in PyTorch 2.6.0+cu124, rated problematic by VulDB under CWE-665 (Improper Initialization). Manipulating the scale/zero_point argument leads to improper initialization. The attack must be carried out locally, its complexity is high, and public exploit information exists.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-2149","publishedAt":"2025-03-10T17:15:36.290Z","cveId":"CVE-2025-2149","cweIds":["CWE-665"],"cvssScore":"2.5","cvssSeverity":"low","severity":"low","attackType":["other"],"issueType":"vulnerability","affectedPackages":["torch@<= 2.6.0"],"affectedPackageNames":["torch"],"affectedPackageRefs":["pypi:torch"],"affectedVendors":[],"affectedVendorsRaw":["PyTorch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"PyTorch improper initialization in quantized Sigmoid module","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00257,"epssCheckedAt":"2026-11-04T18:09:14.050Z","kevDateAdded":null,"advisoryAliases":["GHSA-x3gm-94wq-g975"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:54:29.738Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}