CVE-2025-55557

CVE-2025-55557 : A NameError occurs in PyTorch v2.7.0 when a model uses torch.cummin and is compiled by Inductor, leading to a Denial of Service. The initial description provides the affected components and the root cause, but no public remediation or exploitation details are documented in the su...

CVE-2025-55558

A buffer overflow vulnerability exists in pytorch v2.7.0 caused by a boundary error during model compilation when handling untrusted input. The flaw is triggered when a model contains a specific combination of torch.nn.Conv2d , torch.nn.functional.hardshrink , and torch.Tensor.view-torch.mv() and...

CVE-2025-46153

The PyTorch machine learning framework (versions before 3.7.0 ) contains a vulnerability in the bernoulli_p decompose function located in decompositions.py . The issue stems from a lack of full consistency with the eager CPU implementation, which negatively impacts nn.Dropout1d , nn.Dropout2d , a...

CVE-2025-46148

The PyTorch machine learning framework is affected by a vulnerability in versions through 2.6.0 . When using eager mode , the nn.PairwiseDistance(p=2) configuration produces incorrect results due to insufficient validation of input data . This flaw could allow an attacker to compromise the confid...

CVE-2025-46152

The PyTorch machine learning framework contains a security vulnerability in the torch.bitwise_right_shift interface. The flaw occurs because the function mishandles out-of-bounds values for the **

PyTorch security vulnerabilities

PyTorch is a Python package open-sourced by PyTorch. PyTorch has a security vulnerability that stems from an assertion error in nn.Fold when using inductor, no details of the vulnerability are provided at this time...

PyTorch security vulnerabilities

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from an information disclosure vulnerability that stems from FractionalMaxPool2d producing inconsistent results when using torch.compile, no details of the vulnerability are provided at this time...

PyTorch security vulnerabilities

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a security vulnerability that stems from the bitwiserightshift function mishandling the boundary value of the OTHER parameter, which can be exploited by an attacker to cause an output error...

PyTorch security vulnerabilities

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a security vulnerability that stems from an inconsistency between the bernoullip decomposition function and the CPU implementation, no details of the vulnerability are provided at this time...

PyTorch security vulnerabilities

PyTorch is a Python package open-sourced by PyTorch. An integer overflow vulnerability exists in the PyTorch torch.nantonum-.long component, no details of the vulnerability are available at this time...

PyTorch security vulnerabilities

PyTorch is a Python package open-sourced by PyTorch. PyTorch= suffers from a buffer overflow vulnerability that stems from a boundary error in the PyTorch model compilation when handling untrusted input, which can be exploited by an attacker to cause a denial of service...

CVE-2025-55557

A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service DoS...

CVE-2025-55558

A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv and is compiled by Inductor, leading to a Denial of Service DoS...

CVE-2025-55552

pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randnlike are used together...

CVE-2025-46153

PyTorch before 3.7.0 has a bernoullip decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallbackrandom=True...

CVE-2025-55560

An issue in pytorch v2.7.0 can lead to a Denial of Service DoS when a PyTorch model consists of torch.Tensor.tosparse and torch.Tensor.todense and is compiled by Inductor...

CVE-2025-55553

A syntax error in the component proxytensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service DoS...

PyTorch security vulnerabilities

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from an information disclosure vulnerability that stems from nn.PairwiseDistancep=2 producing incorrect results in eager mode, no details of the vulnerability are provided at this time...

PyTorch security vulnerabilities

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a security vulnerability that stems from mishandling when compiling models containing torch.Tensor.tosparse and torch.Tensor.todense, which can be exploited by an attacker to cause a denial of service...

PyTorch security vulnerabilities

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a security vulnerability that stems from unexpected behavior when the torch.rot90 and torch.randnlike components are used together, no details of the vulnerability are provided at this time...