19 matches found
CVE-2026-65918
A flaw was found in torchvision, a library for PyTorch. This vulnerability, an out-of-bounds heap read in the GIF decoder, allows a remote attacker to supply specially crafted or truncated GIF files. Successful exploitation can lead to a denial of service, causing the application to crash, or the...
CVE-2026-15679
Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face PyTorch Image Models. User interaction is required to exploit this...
Linux Distros Unpatched Vulnerability : CVE-2026-65918
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's readfromtensor callback that...
CVE-2026-65918
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's readfromtensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fau...
UBUNTU-CVE-2026-65918
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's readfromtensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fau...
CVE-2026-65918 PyTorch torchvision GIF Decoder Out-of-bounds Heap Read
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's readfromtensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fau...
CVE-2026-65918 PyTorch torchvision GIF Decoder Out-of-bounds Heap Read
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's readfromtensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fau...
CVE-2026-65918
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's readfromtensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fau...
CVE-2026-65918
CVE-2026-65918 affects PyTorch torchvision up to version 0.28.0. The GIF decoder’s read_from_tensor callback performs an out-of-bounds heap read by passing an unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to trigger a denial of service (segmentation fault) or d...
CVE-2026-65918 PyTorch torchvision GIF Decoder Out-of-bounds Heap Read
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's readfromtensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fau...
CVE-2026-65918
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's readfromtensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fau...
GHSA-Q2X7-8RV6-6Q7H vulnerabilities
Vulnerabilities for packages: dask-gateway, reflex, nemo, emissary, kubeflow-jupyter-web-app, py3-jinja2, checkov, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, superset, apache-beam-python-3.11-sdk, airflow, ansible-operator, localstack, mlflow, kserve...
GHSA-GMJ6-6F8F-6699 vulnerabilities
Vulnerabilities for packages: dask-gateway, reflex, nemo, emissary, kubeflow-jupyter-web-app, py3-jinja2, checkov, kubeflow-volumes-web-app, superset, apache-beam-python-3.11-sdk, airflow, ansible-operator, localstack, mlflow, kserve...
CVE-2024-56201 vulnerabilities
Vulnerabilities for packages: dask-gateway, reflex, nemo, emissary, kubeflow-jupyter-web-app, py3-jinja2, checkov, kubeflow-volumes-web-app, superset, apache-beam-python-3.11-sdk, airflow, ansible-operator, localstack, mlflow, kserve...
CVE-2024-56326 vulnerabilities
Vulnerabilities for packages: dask-gateway, reflex, nemo, emissary, kubeflow-jupyter-web-app, py3-jinja2, checkov, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, superset, apache-beam-python-3.11-sdk, airflow, ansible-operator, localstack, mlflow, kserve...
MAL-2024-11731 Malicious code in torchvisions (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 51134ba41129052e6c7163c273094867918aff7ffc9579a3834f3febb74b44d7 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
GHSA-CX63-2MW6-8HW5 vulnerabilities
Vulnerabilities for packages: nvidia-nsight-compute-13.1, kubeflow-katib, py3-pipenv, reflex, nemo, py3-cassandra-medusa, superset, checkov, airflow, k8s-sidecar, py3.9-setuptools, nvidia-nsight-compute-13.2, az, request-1276...
CVE-2024-6345 vulnerabilities
Vulnerabilities for packages: nvidia-nsight-compute-13.1, kubeflow-katib, py3-pipenv, reflex, nemo, py3-cassandra-medusa, superset, checkov, airflow, k8s-sidecar, py3.9-setuptools, nvidia-nsight-compute-13.2, az, request-1276...
The vulnerability of the decode_png() function in the TorchVision computer vision system, which allows a intruder to trigger a service failure
The vulnerability of the decodepng function in the TorchVision computer vision system lies in the handling of PNG format files, where data is read beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...