Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl

Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1x8664.whl Vulnerability Details CVEID:CVE-2025-4287 DESCRIPTION: A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this...

PyTorch max_pool2d Code Execution

The vulnerability of the torch.nn.functional.maxpool2d function in the PyTorch machine learning framework is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

PyTorch nan_to_num DoS

The vulnerability of the torch.nantonum function in the PyTorch machine learning framework is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to trigger a service failure...

PyTorch to_sparse DoS

The vulnerability of the torch.Tensor.tosparse and torch.Tensor.todense methods in the PyTorch machine learning framework is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

EUVD-2024-1105

Malicious code in bioql PyPI...

EUVD-2022-0340

Malicious code in bioql PyPI...

EUVD-2025-8684

Malicious code in bioql PyPI...

EUVD-2025-11538

Malicious code in bioql PyPI...

EUVD-2025-15087

Malicious code in bioql PyPI...

EUVD-2025-6954

Malicious code in bioql PyPI...

EUVD-2025-8748

Malicious code in bioql PyPI...

EUVD-2025-7523

Malicious code in bioql PyPI...

EUVD-2025-12257

Malicious code in bioql PyPI...

EUVD-2025-13418

Malicious code in bioql PyPI...

EUVD-2025-9636

Malicious code in bioql PyPI...

SUSE CVE-2025-55554

pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nantonum-.long...

Linux Distros Unpatched Vulnerability : CVE-2025-55551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service DoS when performing a slice operation. CVE-2025-55551...

Linux Distros Unpatched Vulnerability : CVE-2025-46153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyTorch before 3.7.0 has a bernoullip decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negativel...

Unspecified Vulnerability in PyTorch (CNVD-2025-23278)

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a security vulnerability that stems from mishandling when compiling models containing torch.Tensor.tosparse and torch.Tensor.todense, which can be exploited by an attacker to cause a denial of service...

Unspecified Vulnerability in PyTorch (CNVD-2025-23279)

PyTorch is a Python package open-sourced by PyTorch. PyTorch has a security vulnerability that stems from a syntax error in the component proxytensor.py, which can be exploited by an attacker to cause a denial of service...