CVEs (31)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Linuxfoundation 1Pytorch Jun 17, 2026 Mar 31, 2025 4.8 MEDIUM· v4 5.3 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The...Show more |
1Linuxfoundation 1Pytorch Jun 17, 2026 Mar 31, 2025 4.8 MEDIUM· v4 5.3 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attacking locally is a re...Show more |
1Linuxfoundation 1Pytorch Jun 17, 2026 Mar 31, 2025 4.8 MEDIUM· v4 5.3 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory corruption. Local acce...Show more |
1Linuxfoundation 1Pytorch Jun 17, 2026 Mar 30, 2025 4.8 MEDIUM· v4 5.5 MEDIUM· v3 1.7 LOW· v2 A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. The manipulation leads to denial of service. An attack has to b...Show more |
2Linuxfoundation Pytorch2Pytorch PytorchJun 17, 2026 Mar 10, 2025 2.0 LOW· v4 2.5 LOW· v3 1.0 LOW· v2 A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zer...Show more |
2Linuxfoundation Pytorch2Pytorch PytorchJun 17, 2026 Mar 10, 2025 2.3 LOW· v4 7.5 HIGH· v3 5.1 MEDIUM· v2 A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler._call_end_callbacks_on_jit_fut of the component Tuple Handler. The man...Show more |
In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed computing. |
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp. |
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp. |
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted in...Show more |
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely. |