Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl

Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1x8664.whl Vulnerability Details CVEID:CVE-2025-4287 DESCRIPTION: A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this...

The vulnerability of the `torch.nn.functional.max_pool2d()` function in the PyTorch machine learning framework allows a hacker to execute arbitrary code.

The vulnerability of the torch.nn.functional.maxpool2d function in the PyTorch machine learning framework is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability of the torch.nan_to_num() function in the PyTorch machine learning framework allows a attacker to trigger a service failure.

The vulnerability of the torch.nantonum function in the PyTorch machine learning framework is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to trigger a service failure...

The vulnerability of the `torch.Tensor.to_sparse()` and `torch.Tensor.to_dense()` methods in the PyTorch machine learning framework allows attackers to trigger a denial-of-service attack.

The vulnerability of the torch.Tensor.tosparse and torch.Tensor.todense methods in the PyTorch machine learning framework is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

EUVD-2022-0340

Malicious code in bioql PyPI...

EUVD-2025-12257

Malicious code in bioql PyPI...

EUVD-2025-11538

Malicious code in bioql PyPI...

EUVD-2025-9636

Malicious code in bioql PyPI...

EUVD-2025-6954

Malicious code in bioql PyPI...

EUVD-2025-8748

Malicious code in bioql PyPI...

EUVD-2025-7523

Malicious code in bioql PyPI...

EUVD-2024-1105

Malicious code in bioql PyPI...

EUVD-2025-13418

Malicious code in bioql PyPI...

EUVD-2025-15087

Malicious code in bioql PyPI...

EUVD-2025-8684

Malicious code in bioql PyPI...

SUSE CVE-2025-55554

pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nantonum-.long...

Linux Distros Unpatched Vulnerability : CVE-2025-46153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyTorch before 3.7.0 has a bernoullip decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negativel...

Linux Distros Unpatched Vulnerability : CVE-2025-55551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service DoS when performing a slice operation. CVE-2025-55551...

Unspecified Vulnerability in PyTorch (CNVD-2025-23286)

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a security vulnerability that stems from an inconsistency between the bernoullip decomposition function and the CPU implementation, no details of the vulnerability are provided at this time...

Unspecified Vulnerability in PyTorch (CNVD-2025-23280)

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a security vulnerability that stems from the bitwiserightshift function mishandling the boundary value of the OTHER parameter, which can be exploited by an attacker to cause an output error...