CVE-2025-2149

CVE-2025-2149 is a low-severity vulnerability affecting PyTorch 2.6.0+cu124, specifically within the nnq_Sigmoid function of the Quantized Sigmoid Module. An attacker could locally manipulate the scale/zero_point arguments, leading to improper initialization. While public exploit disclosure exists, the attack complexity is high, exploitation is difficult, and the potential impact is limited to low integrity. There is no evidence of active exploitation, no known exploit tools like Metasploit or Nuclei, and minimal community discussion or media coverage.