GHSA-vgrw-7cvw-pwgxMediumCVSS 5.3

PyTorch is vulnerable to memory corruption through its unpack_sequence function

Published
March 31, 2025
Last Modified
June 10, 2026

🔗 CVE IDs covered (1)

📋 Description

A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

A patch is available through commit 4945180.

🎯 Affected products1

  • pip/torch:< 2.9.1

🔗 References (9)