Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-2999

16
FAUCET Score

CVE-2025-2999 is a critical memory corruption vulnerability affecting the torch.nn.utils.rnn.unpack_sequence function in PyTorch version 2.6.0. This flaw, rated Medium with a CVSS score of 5.3, requires local access and low privileges to exploit, potentially leading to limited impact on confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is no evidence of active exploitation, nor are there known Metasploit or Nuclei modules, and it has garnered minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
2.6.0CPE matchmatch criteria
cpe:2.3:a:linuxfoundation:pytorch:2.6.0:-:*:*:*:python:*:*

CVSS Data

CVSS version used by this source: 4.0

4.8MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
LOCAL
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
NONE
VS Confidentiality
LOW
VS Integrity
LOW
VS Availability
LOW
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.18%
Probability of exploitation in next 30 days
EPSS Percentile
8.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0019 is in the 43rd percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

pippatch availablevia ghsa
Product: torchFixed in: 2.9.1
github_advisoryvendor investigatingvia nvd_reference
View patch

Vendor Advisories (1)

pipGHSA-vgrw-7cvw-pwgxmedium

PyTorch is vulnerable to memory corruption through its unpack_sequence function

Mar 31, 2025

References

github.com / pytorch/pytorch/issues/149622
Issue TrackingVendor Advisory
github.com / pytorch/pytorch/issues/149622
Issue TrackingVendor Advisory
vuldb.com
Permissions RequiredVDB Entry
vuldb.com
Third Party AdvisoryVDB Entry
vuldb.com
Third Party AdvisoryVDB Entry