CVE-2026-65918

PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's readfromtensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fau...

CVE-2026-65918

PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's readfromtensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fau...

CVE-2026-65918 PyTorch torchvision GIF Decoder Out-of-bounds Heap Read

PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's readfromtensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fau...

CVE-2026-65918

PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's readfromtensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fau...

CVE-2026-65918

CVE-2026-65918 affects PyTorch torchvision up to version 0.28.0. The GIF decoder’s read_from_tensor callback performs an out-of-bounds heap read by passing an unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to trigger a denial of service (segmentation fault) or d...

fl-manager-components-datasets-torch (=0.1.0), fl-manager-components-formatters-pillow (=0.1.0) +11 more potentially affected by CVE-2026-24178 via nvflare (>=2.2.0 <=2.7.1)

nvflare PYPI version =2.2.0, =0.1.0, =0.2.0, =3.1.27, =3.1.27, =3.1.29, =3.1.31 Source cves: CVE-2026-24178 Source advisory: SNYK:PYTHON-NVFLARE-16318747...

GHSA-Q2X7-8RV6-6Q7H vulnerabilities

Vulnerabilities for packages: airflow, kubeflow-pipelines-visualization-server, nemo, mlflow, py3-jinja2, kserve, py3.9-torchvision-cuda-12.3, checkov, ansible-operator, emissary, dask-gateway, kubeflow-jupyter-web-app, py3-torchvision-cuda-11.8, localstack, superset, kubeflow-volumes-web-app,...

GHSA-GMJ6-6F8F-6699 vulnerabilities

Vulnerabilities for packages: airflow, nemo, mlflow, py3-jinja2, kserve, py3.9-torchvision-cuda-12.3, checkov, ansible-operator, emissary, dask-gateway, kubeflow-jupyter-web-app, py3-torchvision-cuda-11.8, localstack, superset, kubeflow-volumes-web-app, reflex, apache-beam-python-3.11-sdk...

CVE-2024-56201 vulnerabilities

Vulnerabilities for packages: airflow, nemo, mlflow, py3-jinja2, kserve, py3.9-torchvision-cuda-12.3, checkov, ansible-operator, emissary, dask-gateway, kubeflow-jupyter-web-app, py3-torchvision-cuda-11.8, localstack, superset, kubeflow-volumes-web-app, reflex, apache-beam-python-3.11-sdk...

CVE-2024-56326 vulnerabilities

Vulnerabilities for packages: airflow, kubeflow-pipelines-visualization-server, nemo, mlflow, py3-jinja2, kserve, py3.9-torchvision-cuda-12.3, checkov, ansible-operator, emissary, dask-gateway, kubeflow-jupyter-web-app, py3-torchvision-cuda-11.8, localstack, superset, kubeflow-volumes-web-app,...

MAL-2024-11731 Malicious code in torchvisions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 51134ba41129052e6c7163c273094867918aff7ffc9579a3834f3febb74b44d7 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

GHSA-CX63-2MW6-8HW5 vulnerabilities

Vulnerabilities for packages: airflow, az, nemo, py3.9-setuptools, checkov, k8s-sidecar, nvidia-nsight-compute-13.2, nvidia-nsight-compute-13.1, py3-pipenv, py3-cassandra-medusa, py3-torchvision-cuda-11.8, superset, kubeflow-katib, request-1276, reflex...

CVE-2024-6345 vulnerabilities

Vulnerabilities for packages: airflow, az, nemo, py3.9-setuptools, checkov, k8s-sidecar, nvidia-nsight-compute-13.2, nvidia-nsight-compute-13.1, py3-pipenv, py3-cassandra-medusa, py3-torchvision-cuda-11.8, superset, kubeflow-katib, request-1276, reflex...

The vulnerability of the decode_png() function in the TorchVision computer vision system, which allows a intruder to trigger a service failure

The vulnerability of the decodepng function in the TorchVision computer vision system lies in the handling of PNG format files, where data is read beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...