CVE-2025-3121: PYSEC-2025-196 - A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. Th

CVE-2025-3121 · Severity: low · CVSS 3.1 · Published 2025-04-02

Technologies: torch (PyPI). Vendors: PyPI.

Executive brief

A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Affected products

PyPI torch

Related threats

PYSEC-2026-1970 - PyTorch Improper Resource Shutdown or Release vulnerability
PYSEC-2026-139 - A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The mani
PyTorch arbitrary code execution in weights_only unpickler
PyTorch denial of service in torch.profiler.profile
PYSEC-2025-209 - An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.