CVE-2025-46148
- EPSS 0.04%
- Published 25.09.2025 15:16:12
- Last modified 03.10.2025 17:59:26
In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.
CVE-2025-32434
- EPSS 0.23%
- Published 18.04.2025 15:48:18
- Last modified 28.05.2025 13:14:20
PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch whe...
CVE-2025-3730
- EPSS 0.05%
- Published 16.04.2025 21:00:17
- Last modified 28.05.2025 17:35:54
A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Affected is the function torch.nn.functional.ctc_loss of the file aten/src/ATen/native/LossCTC.cpp. The manipulation leads to denial of service. An attack has to be app...
CVE-2025-3136
- EPSS 0.03%
- Published 03.04.2025 04:15:38
- Last modified 28.05.2025 15:59:54
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corrupti...
CVE-2025-3121
- EPSS 0.02%
- Published 02.04.2025 22:15:21
- Last modified 27.05.2025 18:29:00
A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has b...
CVE-2025-3001
- EPSS 0.02%
- Published 31.03.2025 16:15:27
- Last modified 29.05.2025 15:53:31
A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the ...
CVE-2025-3000
- EPSS 0.02%
- Published 31.03.2025 15:15:46
- Last modified 29.05.2025 15:53:39
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to ...
CVE-2025-2999
- EPSS 0.02%
- Published 31.03.2025 15:15:44
- Last modified 29.05.2025 15:53:46
A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has bee...
CVE-2025-2998
- EPSS 0.02%
- Published 31.03.2025 14:15:20
- Last modified 29.05.2025 15:53:57
A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory corruption. Local access is required to approach thi...
CVE-2024-48063
- EPSS 15.18%
- Published 29.10.2024 21:15:04
- Last modified 16.07.2025 00:25:40
In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed computing.