Skip to main content

Improper Resource Shutdown or Release in MarcelRaschke:pytorch

CVE-2025-3730

  • MarcelRaschke:pytorch
  • pytorch
  • torch
Medium
4.8/10

Summary

A vulnerability, classified as problematic, was found in PyTorch. The affected function is "torch.nn.functional.ctc_loss" in the file "aten/src/ATen/native/LossCTC.cpp". The manipulation leads to a denial of service. The attack must be conducted locally. The exploit has been publicly disclosed and may be used. It is recommended that a patch be applied to fix this issue. This issue affects version prior to 2.8.0-rc1.

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

CWE-404 - Improper Resource Shutdown or Release

The program does not release or incorrectly releases a resource before it is made available for re-use.

References

Advisory Timeline

  • Published