TI-2025-01882 Aliases CVE-2025-2149 GHSA-x3gm-94wq-g975

PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization

MEDIUM 44CWE-665Published 2025-03-10 · Updated 2025-03-10

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: High
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: None · Low · None
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.

Summary

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zero_point leads to improper initialization. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00257 17th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	PyTorch	2.6.0+cu124	—	No fix listed	CNA
—	torch (PyPI)	up to 2.6.0	—	No fix listed	GHSA-x3gm-94wq-g975

PyTorch Vendor— Affected 2.6.0+cu124 Fixed in — No fix listed CNA
torch (PyPI) Vendor— Affected up to 2.6.0 Fixed in — No fix listed GHSA-x3gm-94wq-g975

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:linuxfoundation:pytorch:2.6.0:cu124::::python::*	2.6.0 cu124	Vulnerable	backstage

cpe:2.3:a:linuxfoundation:pytorch:2.6.0:cu124:*:*:*:python:*:* Versions 2.6.0 cu124 Vulnerable ·backstage

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-2149
2026-10-03 Alias added: GHSA-x3gm-94wq-g975

References

Exploit 1

https://github.com/pytorch/pytorch/issues/147818#issue-2877301660

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2025-2149

Other 3

TI-2024-32257 In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. CVSS 3.1CRITICAL 9.8
TI-2025-35037 A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and… CVSS 3.1HIGH 7.5
TI-2025-35034 A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS). CVSS 3.1HIGH 7.5
TI-2025-35033 pytorch v2.8.0 was discovered to display unexpected behavior when the components… CVSS 3.1HIGH 7.5
TI-2025-35032 An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a… CVSS 3.1HIGH 7.5
TI-2025-35038 A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of… CVSS 3.1HIGH 7.5

See all 30 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences