{"data":{"id":"f792b627-4a8b-4aba-8f38-8977ac28ae8c","title":"CVE-2025-2148: A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is…","summary":"CVE-2025-2148 affects PyTorch 2.6.0+cu124, specifically the function torch.ops.profiler._call_end_callbacks_on_jit_fut in the Tuple Handler component. Manipulating the argument None leads to memory corruption, and the attack can be launched remotely, though the source rates its complexity as high and exploitation as difficult. VulDB scores it CVSS 4.0 2.3 LOW, while NIST has not yet provided an assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-2148","publishedAt":"2025-03-10T16:15:12.617Z","cveId":"CVE-2025-2148","cweIds":["CWE-119"],"cvssScore":"5","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["torch@<= 2.6.0"],"affectedPackageNames":["torch"],"affectedPackageRefs":["pypi:torch"],"affectedVendors":[],"affectedVendorsRaw":["PyTorch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"PyTorch memory corruption in torch.ops.profiler._call_end_callbacks_on_jit_fut","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00437,"epssCheckedAt":"2026-11-04T06:10:13.820Z","kevDateAdded":null,"advisoryAliases":["GHSA-c678-jfcj-6jmf"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:54:30.237Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-100"],"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","availability","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}