CVE-2025-2149— PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-2149
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zero_point leads to improper initialization. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
初始化不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
PyTorch 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PyTorch是PyTorch开源的一个 Python 包。 PyTorch 2.6.0+cu124版本存在安全漏洞，该漏洞源于nnq_Sigmoid函数可能导致不当初始化。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | PyTorch | 2.6.0+cu124 | - |
II. Public POCs for CVE-2025-2149
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-2149
请登录查看更多情报信息。
- CVE-2025-2149 PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization (Issue 147818)signaturepermissions-required
- CVE-2025-2149 PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization (Issue 147818)vdb-entrytechnical-description
- https://nvd.nist.gov/vuln/detail/CVE-2025-2149
Same Patch Batch · n/a · 2025-03-10 · 16 CVEs total
| CVE-2025-2153 | 5.0 MEDIUM | HDF5 h5 File H5SM.c H5SM_delete heap-based overflow |
| CVE-2025-2148 | 5.0 MEDIUM | PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption |
| CVE-2025-25615 | Unifiedtransform 访问控制错误漏洞 | |
| CVE-2025-25616 | Unifiedtransform 访问控制错误漏洞 | |
| CVE-2024-57492 | Redox C Library 安全漏洞 | |
| CVE-2025-25620 | Unifiedtransform 跨站脚本漏洞 | |
| CVE-2025-25614 | Unifiedtransform 访问控制错误漏洞 | |
| CVE-2025-25382 | Information Kerala Mission SANCHAYA 安全漏洞 | |
| CVE-2025-25940 | VisiCut 代码问题漏洞 | |
| CVE-2025-25977 | canvg 安全漏洞 | |
| CVE-2024-55199 | Celk Sistemas Celk Saude 跨站脚本漏洞 | |
| CVE-2024-53307 | Evisions MAPS 跨站脚本漏洞 | |
| CVE-2025-27910 | tianti 跨站请求伪造漏洞 | |
| CVE-2025-25908 | tianti 跨站脚本漏洞 | |
| CVE-2025-25907 | tianti 跨站请求伪造漏洞 |
IV. Related Vulnerabilities
Same product: PyTorch
- CVE-2026-4538
PyTorch pt2 Loading deserialization - CVE-2026-24747
PyTorch Vulnerable to Remote Code Execution via Untrusted Ch - CVE-2025-4287
PyTorch nccl.py torch.cuda.nccl.reduce denial of service - CVE-2025-32434
PyTorch: `torch.load` with `weights_only=True` leads to remo - CVE-2025-3730
PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of s
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2025-2149
No comments yet