Skip to contentLinuxfoundation vulnerabilities
Products
Show 5 moreShow less
Newest
- linuxfoundation pytorchpytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and...CVE-2025-55552Fix available7.5 High
- linuxfoundation pytorchAn issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of...CVE-2025-55551Fix available7.5 High
- linuxfoundation pytorchPyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it...CVE-2025-46153Fix available5.3 Medium
- linuxfoundation pytorchIn PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds...CVE-2025-46152Fix available5.3 Medium
- linuxfoundation pytorchIn PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.CVE-2025-46150Fix available5.3 Medium
- linuxfoundation pytorchIn PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.CVE-2025-46149Fix available5.3 Medium
- linuxfoundation pytorchIn PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.CVE-2025-46148Fix available5.3 Medium
- dragonflyoss dragonflyDragonfly tiny file download uses hard coded HTTP protocolCVE-2025-59410Fix available5.5 Medium
- dragonflyoss dragonflyDragonfly has weak integrity checks for downloaded filesCVE-2025-59354Fix available5.5 Medium
- dragonflyoss dragonflyManager generates mTLS certificates for arbitrary IP addressesCVE-2025-59353Fix available7.7 High
- dragonflyoss dragonflyDragonfly allows arbitrary file read and write on a peer machineCVE-2025-59352Fix available6.9 Medium
- dragonflyoss dragonflyDragonfly possibly panics due to nil pointer dereference when using variables created alongside an errorCVE-2025-59351Fix available2.7 Low
- dragonflyoss dragonflyTiming attacks against Proxy’s basic authentication are possibleCVE-2025-59350Fix available2.7 Low
- dragonflyoss dragonflyDirectories created via os.MkdirAll are not checked for permissionsCVE-2025-59349Fix available2.0 Low
- dragonflyoss dragonflyDragonfly incorrectly handles a task structure’s usedTraffic fieldCVE-2025-59348Fix available5.5 Medium
- dragonflyoss dragonflyDragonfly Manager makes requests to external endpoints with disabled TLS authenticationCVE-2025-59347Fix available2.7 Low
- dragonflyoss dragonflyDragonfly server-side request forgery vulnerabilityCVE-2025-59346Fix available5.5 Medium
- dragonflyoss dragonflyDragonfly did not enable authentication for some Manager’s endpointsCVE-2025-59345Fix available7.7 High
- google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2735, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6897, mt6899, mt6980d, mt6983, mt6985, mt6989, mt6990, mt6991, mt8169, mt8186, mt8188, mt8676, mt8678, mt8696, mt8775, mt8792, mt8796 +1 more +3 moreIn monitor_hang, there is a possible memory corruption due to use after free. This could lead to...CVE-2025-207057.8 High
- google android, linuxfoundation yocto, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6813, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6990, mt6991, mt8188, mt8196, mt8370, mt8390, mt8676 +3 more +5 moreIn DA, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2025-20696Fix available6.8 Medium
- academysoftwarefoundation materialxMaterialX's Lack of Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack ExhaustionCVE-2025-53012Fix available5.5 Medium
- academysoftwarefoundation materialxMaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion LimitCVE-2025-53009Fix available5.5 Medium
- academysoftwarefoundation materialxMaterialX is Vulnerable to NULL Pointer Dereference due to Unchecked implGraphOutputCVE-2025-53011Fix available2.0 Low
- academysoftwarefoundation materialxMaterialX's unchecked nodeGraph->getOutput return is vulnerable to NULL Pointer DereferenceCVE-2025-53010Fix available2.0 Low
- google android, linuxfoundation yocto, mediatek software development kit +2 more +4 moreIn wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This...CVE-2025-206936.5 Medium
- linuxfoundation docarraydocarray Web API torch_dataset.py __getitem__ prototype pollutionCVE-2025-51505.3 Medium
- containerdcontainerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.CVE-2025-47291Fix available4.6 Medium
- containerdContainerd vulnerable to host filesystem access during image unpackCVE-2025-47290Fix available7.6 High
- linuxfoundation pytorchPyTorch: `torch.load` with `weights_only=True` leads to remote code executionCVE-2025-32434Public exploitFix available9.3 Critical
- linuxfoundation pytorchPyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of serviceCVE-2025-3730Fix availableDisputed4.8 Medium
- linuxfoundation pytorchPyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_allocator_delete memory corruptionCVE-2025-3136Fix available4.8 Medium
- linuxfoundation pytorchPyTorch torch.jit.jit_module_from_flatbuffer memory corruptionCVE-2025-3121Fix available4.8 Medium
- google android, linuxfoundation yocto, mediatek mt6781 +18 more +20 moreIn DA, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2025-20656Fix available6.8 Medium
- linuxfoundation pytorchPyTorch torch.lstm_cell memory corruptionCVE-2025-3001Fix available4.8 Medium
- linuxfoundation pytorchPyTorch torch.jit.script memory corruptionCVE-2025-3000Fix available4.8 Medium
- linuxfoundation pytorchPyTorch torch.nn.utils.rnn.unpack_sequence memory corruptionCVE-2025-2999Fix available4.8 Medium
- linuxfoundation pytorchPyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruptionCVE-2025-2998Fix available4.8 Medium
- linuxfoundation pytorchPyTorch torch.mkldnn_max_pool2d denial of serviceCVE-2025-2953Fix availableDisputed4.8 Medium
- linuxfoundation pipecdPipeCD Vulnerable to Privilege EscalationCVE-2024-533519.8 Critical
- linuxfoundation kuadrantInsecure permissions in kuadrant v0.11.3 allow attackers to gain access to the service account's...CVE-2024-533497.4 High
- containerd, debian linux +1 morecontainerd has an integer overflow in User ID handlingCVE-2024-40635Public exploitFix available4.6 Medium
- linuxfoundation pytorchPyTorch Quantized Sigmoid Module nnq_Sigmoid initializationCVE-2025-2149Fix available2.0 Low
- linuxfoundation pytorchPyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruptionCVE-2025-2148Fix available2.3 Low
- google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6781, mt6789, mt6835, mt6855, mt6878, mt6879, mt6880, mt6886, mt6890, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8370, mt8390, mt8676, mt8678 +2 more +4 moreIn da, there is a possible out of bounds read due to a missing bounds check. This could lead to...CVE-2025-206514.1 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6781, mt6789, mt6835, mt6855, mt6878, mt6879, mt6880, mt6886, mt6890, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8370, mt8390, mt8676, mt8678 +2 more +4 moreIn da, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2025-206506.8 Medium
- google android, linuxfoundation yocto, mediatek software development kit +2 more +4 moreIn Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This...CVE-2024-201475.3 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6781, mt6789, mt6835, mt6855, mt6878, mt6879, mt6880, mt6886, mt6890, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8370, mt8390 +2 more +4 moreIn V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead...CVE-2025-20635Fix available6.6 Medium
- linuxfoundation magmaThe Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit...CVE-2024-244237.5 High
- linuxfoundation magmaThe Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit...CVE-2024-244227.5 High
- linuxfoundation magmaA type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit...CVE-2024-244219.8 Critical
- Show moreLoading…