PyTorchPYSEC-2025-205
PyTorch: denial of service
High7.5CVE-2025-55553 · Published Sep 25, 2025 · updated May 20, 2026
A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| torch PyPI | < 2.7.1 | 2.7.1 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity from
- the CVSS score
- Also known as
- BIT-pytorch-2025-55553, CVE-2025-55553
More PyTorch advisories
All PyTorch| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 252025 | PyTorch: denial of service High7.5Sep 25, 2025 | High7.5 | 2.7.1 |
| Sep 252025 | pytorch v2.8.0 was discovered to display unexpected behaviorHigh7.5Sep 25, 2025 | High7.5 | 2.9.0 |
| Sep 252025 | pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long()Medium5.3Sep 25, 2025 | Medium5.3 | 2.9.0 |
| Sep 252025 | PyTorch: denial of serviceHigh7.5Sep 25, 2025 | High7.5 | 2.7.1 |
| Sep 252025 | PyTorch: buffer overflowHigh7.5Sep 25, 2025 | High7.5 | 2.7.1 |
| Sep 252025 | In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect resultsMedium5.3Sep 25, 2025 | Medium5.3 | 2.7.0 |