CVE-2025-2149 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of the component Quantize…
Low CVSS: 2.0

CVE-2025-2149

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zero_point leads to improper initialization. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
Vendor
Linuxfoundation
Product
Pytorch
CWE
CWE-665
Yayın Tarihi
2025-03-10 13:15:36
Güncelleme
2026-02-24 18:52:49
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-665 Pytorch LOW Linuxfoundation 2025

Referanslar

https://github.com/pytorch/pytorch/issues/147818 https://github.com/pytorch/pytorch/issues/147818#issue-2877301660 https://vuldb.com/?ctiid.299060 https://vuldb.com/?id.299060 https://vuldb.com/?submit.506563 https://github.com/pytorch/pytorch/issues/147818 https://github.com/pytorch/pytorch/issues/147818#issue-2877301660