3291 matches found
CVE-2025-55553
A syntax error in the component proxytensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service DoS...
CVE-2025-55554: Integer Overflow or Wraparound
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nantonum-.long...
CVE-2025-46150
In PyTorch versions prior to 2.7.0 , using torch.compile with the FractionalMaxPool2d component leads to inconsistent results . While one source suggests an information disclosure vulnerability, specific technical details regarding the root cause or exploitation are not fully provided. Additional...
CVE-2025-55554
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nantonum-.long...
Incorrect Bitwise Shift of Integer
Overview Affected versions of this package are vulnerable to Incorrect Bitwise Shift of Integer in the torch.bitwiserightshift function. An attacker can modify data integrity by leveraging local access with low privileges even if config.fallbackrandom is set to True. Remediation Upgrade...
CVE-2025-55558
A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv and is compiled by Inductor, leading to a Denial of Service DoS...
CVE-2025-46149
The PyTorch machine learning framework (versions before 2.7.0 ) contains a vulnerability where the nn.Fold module triggers an assertion error when the inductor is used. While some reports suggest this could lead to a denial-of-service attack or is related to buffer overflow issues, specific detai...
PyTorch security vulnerabilities
PyTorch is a Python package open-sourced by PyTorch. PyTorch has a security vulnerability that stems from a syntax error in the component proxytensor.py, which can be exploited by an attacker to cause a denial of service...
CVE-2025-55554
The PyTorch machine learning framework, specifically version v2.8.0 , is vulnerable to an integer overflow in the torch.nan_to_num-.long() component. A malicious actor could exploit this vulnerability to trigger a service failure . While the core cause is identified as an integer overflow, specif...
CVE-2025-55551
An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service DoS when performing a slice operation...
CVE-2025-46148
In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistancep=2 produces incorrect results...
CVE-2025-55551: Uncontrolled Resource Consumption
An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service DoS when performing a slice operation...
PyTorch security vulnerabilities
PyTorch is a Python package open-sourced by PyTorch. An unspecified vulnerability exists in the PyTorch torch.linalg.lu component, which can be exploited by an attacker to cause a denial of service...
CVE-2025-46149
In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error...
CVE-2025-55551
An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service DoS when performing a slice operation...
CVE-2025-55553
A syntax error in the component proxytensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service DoS...
CVE-2025-55554
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nantonum-.long...
CVE-2025-55558
A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv and is compiled by Inductor, leading to a Denial of Service DoS...