Advisoriesby Ibis
PyTorch security advisories
32 advisories · 3 critical or high in 12 months · latest Mar 22
32 advisories
PyTorch: unsafe deserializationCVE-2026-4538no fix yetPyTorch: code executionCVE-2026-24747fixed in 2.10.0PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint FilesCVE-2026-24747fixed in 2.10.0PyTorch: denial of serviceCVE-2025-63396no fix yetPyTorch: denial of serviceCVE-2025-55560fixed in 2.7.1pytorch v2.8.0 was discovered to display unexpected behaviorCVE-2025-55552fixed in 2.9.0PyTorch: denial of serviceCVE-2025-55553fixed in 2.7.1pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long()CVE-2025-55554fixed in 2.9.0PyTorch: denial of serviceCVE-2025-55557fixed in 2.7.1PyTorch: buffer overflowCVE-2025-55558fixed in 2.7.1In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect resultsCVE-2025-46148fixed in 2.7.0In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion errorCVE-2025-46149fixed in 2.7.0In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent resultsCVE-2025-46150fixed in 2.7.0In PyTorch before 2.7.0CVE-2025-46152fixed in 2.7.0PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py...CVE-2025-46153fixed in 2.7.0PyTorch: denial of serviceCVE-2025-55551fixed in 2.9.0PyTorch: `torch.load` with `weights_only=True` leads to remote code executionCVE-2025-32434fixed in 2.6.0PyTorch Improper Resource Shutdown or Release vulnerabilityCVE-2025-3730fixed in 2.8.0PyTorch: memory corruptionCVE-2025-3136no fix yetPyTorch: memory corruptionCVE-2025-3121no fix yetPyTorch is vulnerable to memory corruption through its torch.lstm_cell functionCVE-2025-3001fixed in 2.10.0PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence FunctionCVE-2025-2998no fix yetPyTorch is vulnerable to memory corruption through its torch.jit.script functionCVE-2025-3000fixed in 2.13.0PyTorch is vulnerable to memory corruption through its unpack_sequence functionCVE-2025-2999fixed in 2.9.1PyTorch susceptible to local Denial of ServiceCVE-2025-2953fixed in 2.7.1-rc1A vulnerability was found in PyTorch 2.6.0+cu124CVE-2025-2149no fix yetPyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None ArgumentCVE-2025-2148no fix yetPyTorch: unsafe deserializationCVE-2024-48063fixed in 2.5.0PyTorch: out-of-bounds readCVE-2024-31584fixed in 2.2.0PyTorch heap buffer overflow vulnerabilityCVE-2024-31580fixed in 2.2.0Pytorch use-after-free vulnerabilityCVE-2024-31583fixed in 2.2.0PyTorch vulnerable to arbitrary code executionCVE-2022-45907fixed in 1.13.1About PyTorch
The open-source machine learning framework (PyTorch Foundation).
Packages watched: torch (PyPI).