1845 matches found
CVE-2025-55560
CVE-2025-55560 affects PyTorch where a model using torch.Tensor.to_sparse() and torch.Tensor.to_dense() compiled by Inductor can cause a DoS. Connected advisories specify affected package versions: PyTorch < 2.0.0-11 and PyTorch
CVE-2025-46153
PyTorch before 3.7.0 has a bernoullip decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallbackrandom=True...
CVE-2025-46149
The PyTorch machine learning framework (versions before 2.7.0 ) contains a vulnerability where the nn.Fold module triggers an assertion error when the inductor is used. While some reports suggest this could lead to a denial-of-service attack or is related to buffer overflow issues, specific detai...
CVE-2025-55558: Uncontrolled Resource Consumption
A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv and is compiled by Inductor, leading to a Denial of Service DoS...
PT-2025-39379
Name of the Vulnerable Software and Affected Versions PyTorch versions through 2.6.0 Description When eager mode is used, the nn.PairwiseDistancep=2 function in PyTorch produces incorrect results. The p parameter in the nn.PairwiseDistance function determines the distance metric. A value of 2...
CVE-2025-55554
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nantonum-.long...
CVE-2025-55552
pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randnlike are used together...
CVE-2025-55560: Uncontrolled Resource Consumption
An issue in pytorch v2.7.0 can lead to a Denial of Service DoS when a PyTorch model consists of torch.Tensor.tosparse and torch.Tensor.todense and is compiled by Inductor...
CVE-2025-55557
A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service DoS...
PT-2025-39415
Name of the Vulnerable Software and Affected Versions pytorch version 2.7.0 Description A Name Error occurs when a PyTorch model includes torch.cummin and is compiled by Inductor, resulting in a Denial of Service DoS. The issue involves a naming conflict during the compilation process, leading to...
CVE-2025-46152
The PyTorch machine learning framework contains a security vulnerability in the torch.bitwise_right_shift interface. The flaw occurs because the function mishandles out-of-bounds values for the **
CVE-2025-55551
An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service DoS when performing a slice operation...
CVE-2025-55554: Integer Overflow or Wraparound
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nantonum-.long...
PT-2025-39382
Name of the Vulnerable Software and Affected Versions PyTorch versions prior to 2.7.0 Description The bitwise right shift function in PyTorch produces incorrect output when the other argument has certain out-of-bounds values. This issue affects versions prior to 2.7.0. Recommendations Update to...
CVE-2025-55553
A syntax error in the component proxytensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service DoS...
CVE-2025-55560
An issue in pytorch v2.7.0 can lead to a Denial of Service DoS when a PyTorch model consists of torch.Tensor.tosparse and torch.Tensor.todense and is compiled by Inductor...
CVE-2025-46148: Undefined Security Weakness
In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistancep=2 produces incorrect results...
CVE-2025-55553: Uncaught Exception
A syntax error in the component proxytensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service DoS...
CVE-2025-55558
A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv and is compiled by Inductor, leading to a Denial of Service DoS...