EUVD-2025-25170

Malicious code in bioql PyPI...

EUVD-2025-31110

Malicious code in bioql PyPI...

In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.

...

SUSE CVE-2025-55552

pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randnlike are used together...

Linux Distros Unpatched Vulnerability : CVE-2025-55554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nantonum-.long. CVE-2025-55554 Note that Nessus relies on the presence of th...

Linux Distros Unpatched Vulnerability : CVE-2025-46150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results. CVE-2025-46150 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2025-55557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service DoS...

PyTorch has an unspecified vulnerability

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a security vulnerability that stems from a name error when compiling a model containing torch.cummin using Inductor, which can be exploited by an attacker to cause a denial of service...

PyTorch Information Disclosure Vulnerability

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from an information disclosure vulnerability that stems from FractionalMaxPool2d producing inconsistent results when using torch.compile, no details of the vulnerability are provided at this time...

01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +25613 more potentially affected by CVE-2025-55560 via torch (>=1.0.0 <=2.7.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 - a1facts =0.2.6 and more Source cves: CVE-2025-55560 Source advisory: OSV:PYSEC-2025-209...

01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +25839 more potentially affected by CVE-2025-55552 via torch (>=1.0.0 <=2.8.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 - a1facts =0.2.6 and more Source cves: CVE-2025-55552 Source advisory: OSV:PYSEC-2025-204...

DEBIAN-CVE-2025-55557

A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service DoS...

01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +25613 more potentially affected by CVE-2025-55558 via torch (>=1.0.0 <=2.7.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 - a1facts =0.2.6 and more Source cves: CVE-2025-55558 Source advisory: OSV:PYSEC-2025-208...

01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +25613 more potentially affected by CVE-2025-55557 via torch (>=1.0.0 <=2.7.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 - a1facts =0.2.6 and more Source cves: CVE-2025-55557 Source advisory: OSV:PYSEC-2025-207...

PYSEC-2025-207

A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service DoS...

AZL-68120 CVE-2025-55552 affecting package pytorch for versions less than 2.0.0-11

pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randnlike are used together...

01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +25613 more potentially affected by CVE-2025-55553 via torch (>=1.0.0 <=2.7.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 - a1facts =0.2.6 and more Source cves: CVE-2025-55553 Source advisory: OSV:PYSEC-2025-205...

Integer Overflow or Wraparound

Overview torch is a Tensors and Dynamic neural networks in Python with strong GPU acceleration Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the torch.nantonum function when used with .long to convert float"inf" in eager mode. An attacker can cause...

01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +25918 more potentially affected by CVE-2025-55554 via torch (>=1.0.0 <=2.9.1)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 - a1facts =0.2.6 and more Source cves: CVE-2025-55554 Source advisory: SNYK:PYTHON-TORCH-13052969...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the torch.nantonum function when used with .long to convert float"inf" in eager mode. An attacker can cause unexpected behavior by providing specially crafted input that triggers an integer overflow...