CVE-2025-2148

CVE-2025-2148 is a critical memory corruption vulnerability affecting PyTorch versions 2.6.0+cu124, specifically within the torch.ops.profiler._call_end_callbacks_on_jit_fut function's Tuple Handler component. A remote attacker can trigger this flaw by manipulating a 'None' argument. While the attack complexity is high and exploitation appears difficult, a successful exploit could lead to significant impact, including high confidentiality, integrity, and availability compromise. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.