Linuxfoundation Pytorch vulnerabilities

• linuxfoundation pytorch PyTorch pt2 Loading deserialization CVE-2026-4538 Fix available 4.8 MediumMarch 22, 2026
• linuxfoundation pytorch, red hat openshift ai (rhoai), openshift ai 2.25 +2 more PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files CVE-2026-24747 Fix available 8.8 HighJanuary 27, 2026
• linuxfoundation pytorch An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch... CVE-2025-63396 Fix available 3.3 LowNovember 12, 2025
• linuxfoundation pytorch An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of... CVE-2025-55560 Fix available 7.5 HighSeptember 25, 2025
• linuxfoundation pytorch A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d,... CVE-2025-55558 Fix available 7.5 HighSeptember 25, 2025
• linuxfoundation pytorch A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is... CVE-2025-55557 Fix available 7.5 HighSeptember 25, 2025
• linuxfoundation pytorch pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-... CVE-2025-55554 Fix available 5.3 MediumSeptember 25, 2025
• linuxfoundation pytorch A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a... CVE-2025-55553 Fix available 7.5 HighSeptember 25, 2025
• linuxfoundation pytorch pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and... CVE-2025-55552 Fix available 7.5 HighSeptember 25, 2025
• linuxfoundation pytorch An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of... CVE-2025-55551 Fix available 7.5 HighSeptember 25, 2025
• linuxfoundation pytorch PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it... CVE-2025-46153 Fix available 5.3 MediumSeptember 25, 2025
• linuxfoundation pytorch In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds... CVE-2025-46152 Fix available 5.3 MediumSeptember 25, 2025
• linuxfoundation pytorch In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results. CVE-2025-46150 Fix available 5.3 MediumSeptember 25, 2025
• linuxfoundation pytorch In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error. CVE-2025-46149 Fix available 5.3 MediumSeptember 25, 2025
• linuxfoundation pytorch In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results. CVE-2025-46148 Fix available 5.3 MediumSeptember 25, 2025
• linuxfoundation pytorch PyTorch: `torch.load` with `weights_only=True` leads to remote code execution CVE-2025-32434 Public exploitFix available 9.3 CriticalApril 18, 2025
• linuxfoundation pytorch PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of service CVE-2025-3730 Fix availableDisputed 4.8 MediumApril 16, 2025
• linuxfoundation pytorch PyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_allocator_delete memory corruption CVE-2025-3136 Fix available 4.8 MediumApril 3, 2025
• linuxfoundation pytorch PyTorch torch.jit.jit_module_from_flatbuffer memory corruption CVE-2025-3121 Fix available 4.8 MediumApril 2, 2025
• linuxfoundation pytorch PyTorch torch.lstm_cell memory corruption CVE-2025-3001 Fix available 4.8 MediumMarch 31, 2025
• linuxfoundation pytorch PyTorch torch.jit.script memory corruption CVE-2025-3000 Fix available 4.8 MediumMarch 31, 2025
• linuxfoundation pytorch PyTorch torch.nn.utils.rnn.unpack_sequence memory corruption CVE-2025-2999 Fix available 4.8 MediumMarch 31, 2025
• linuxfoundation pytorch PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption CVE-2025-2998 Fix available 4.8 MediumMarch 31, 2025
• linuxfoundation pytorch PyTorch torch.mkldnn_max_pool2d denial of service CVE-2025-2953 Fix availableDisputed 4.8 MediumMarch 30, 2025
• linuxfoundation pytorch PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization CVE-2025-2149 Fix available 2.0 LowMarch 10, 2025
• linuxfoundation pytorch PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption CVE-2025-2148 Fix available 2.3 LowMarch 10, 2025
• linuxfoundation pytorch In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. CVE-2024-48063 Fix availableDisputed 9.8 CriticalOctober 29, 2024
• linuxfoundation pytorch, pytorchlightning pytorch lightning +1 more Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit... CVE-2024-31584 Fix available 5.5 MediumApril 19, 2024
• linuxfoundation pytorch, pytorchlightning pytorch lightning +1 more Pytorch use-after-free vulnerability CVE-2024-31583 Fix available 7.8 HighApril 17, 2024
• linuxfoundation pytorch PyTorch heap buffer overflow vulnerability CVE-2024-31580 Fix available 4.0 MediumApril 17, 2024
• linuxfoundation pytorch PyTorch vulnerable to arbitrary code execution CVE-2022-45907 Fix available 9.8 CriticalNovember 26, 2022