AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

PyTorchPYSEC-2025-205

PyTorch: denial of service

PyTorch

CVE-2025-55553 · Published Sep 25, 2025 · updated May 20, 2026

High7.5
Fix: upgrade to 2.7.1 or later
Source advisory

A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).

Affected versions

PackageAffectedFixed in
torch
PyPI
< 2.7.12.7.1
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
the CVSS score
Also known as
BIT-pytorch-2025-55553, CVE-2025-55553

More PyTorch advisories

All PyTorch
High 7.5Sep 25, 2025PyTorch: denial of serviceCVE-2025-55560fixed in 2.7.1High 7.5Sep 25, 2025pytorch v2.8.0 was discovered to display unexpected behaviorCVE-2025-55552fixed in 2.9.0Medium 5.3Sep 25, 2025pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long()CVE-2025-55554fixed in 2.9.0High 7.5Sep 25, 2025PyTorch: denial of serviceCVE-2025-55557fixed in 2.7.1High 7.5Sep 25, 2025PyTorch: buffer overflowCVE-2025-55558fixed in 2.7.1Medium 5.3Sep 25, 2025In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect resultsCVE-2025-46148fixed in 2.7.0