CVE-2025-2148
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Mar 10, 2025
CWE ID 352
Summary
CVE-2025-2148 is a critical vulnerability identified in PyTorch 2.6.0+cu124. This issue affects the function torch.ops.profiler.\_call\_end\_callbacks\_on\_jit\_fut, which is part of the Tuple Handler component. Manipulation of the argument None results in memory corruption, which can be exploited remotely. However, the complexity of an attack is relatively high, making exploitation a difficult task.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Oracle Advanced Outbound Telephony
Affected Vendors
- BonqDAO