PyTorchPYSEC-2025-210

An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS).

Low3.3CVE-2025-63396 · Published Nov 12, 2025 · updated May 21, 2026

Affected versions

Package	Affected	Fixed in
torch PyPI	<= 2.5.0-NA	No fix yet
	<= 2.7.1-NA	No fix yet

Details and references

CVSS 3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Severity from: the CVSS score
Also known as: BIT-pytorch-2025-63396, CVE-2025-63396

More PyTorch advisories

All PyTorch

Date	Advisory	Severity	Fixed in
Sep 252025	An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor. CVE-2025-55560High7.5fixed in 2.7.1	High7.5	2.7.1
Sep 252025	pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together. CVE-2025-55552High7.5fixed in 2.9.0	High7.5	2.9.0
Sep 252025	A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS). CVE-2025-55553High7.5fixed in 2.7.1	High7.5	2.7.1
Sep 252025	pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long(). CVE-2025-55554Medium5.3fixed in 2.9.0	Medium5.3	2.9.0
Sep 252025	A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS). CVE-2025-55557High7.5fixed in 2.7.1	High7.5	2.7.1
Sep 252025	A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a Denial of Service (DoS). CVE-2025-55558High7.5fixed in 2.7.1	High7.5	2.7.1

Affected versions

More PyTorch advisories

Critical advisories by email