AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

PyTorchPYSEC-2025-203

PyTorch: denial of service

PyTorch

CVE-2025-55551 · Published Sep 25, 2025 · updated May 20, 2026

High7.5
Fix: upgrade to 2.9.0 or later
Source advisory

An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.

Affected versions

PackageAffectedFixed in
torch
PyPI
< 2.9.02.9.0
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
the CVSS score
Also known as
BIT-pytorch-2025-55551, CVE-2025-55551

More PyTorch advisories

All PyTorch
High 7.5Sep 25, 2025PyTorch: denial of serviceCVE-2025-55560fixed in 2.7.1High 7.5Sep 25, 2025pytorch v2.8.0 was discovered to display unexpected behaviorCVE-2025-55552fixed in 2.9.0High 7.5Sep 25, 2025PyTorch: denial of serviceCVE-2025-55553fixed in 2.7.1Medium 5.3Sep 25, 2025pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long()CVE-2025-55554fixed in 2.9.0High 7.5Sep 25, 2025PyTorch: denial of serviceCVE-2025-55557fixed in 2.7.1High 7.5Sep 25, 2025PyTorch: buffer overflowCVE-2025-55558fixed in 2.7.1