Pytorch vulnerabilities

Products

• Pytorch 16
• Serve 6
• Torchserve 4

Newest

• linuxfoundation torchvision, pytorch vision +1 more PyTorch torchvision GIF Decoder Out-of-bounds Heap Read CVE-2026-65918 7.1 HighJuly 23, 2026
• linuxfoundation pytorch PyTorch pt2 Loading deserialization CVE-2026-4538 Fix available 4.8 MediumMarch 22, 2026
• linuxfoundation pytorch, red hat openshift ai (rhoai), openshift ai 2.25 +2 more PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files CVE-2026-24747 Fix available 8.8 HighJanuary 27, 2026
• pytorch PyTorch nccl.py torch.cuda.nccl.reduce denial of service CVE-2025-4287 4.8 MediumMay 5, 2025
• linuxfoundation pytorch PyTorch: `torch.load` with `weights_only=True` leads to remote code execution CVE-2025-32434 Public exploitFix available 9.3 CriticalApril 18, 2025
• linuxfoundation pytorch PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of service CVE-2025-3730 Fix availableDisputed 4.8 MediumApril 16, 2025
• linuxfoundation pytorch PyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_allocator_delete memory corruption CVE-2025-3136 Fix available 4.8 MediumApril 3, 2025
• linuxfoundation pytorch PyTorch torch.jit.jit_module_from_flatbuffer memory corruption CVE-2025-3121 Fix available 4.8 MediumApril 2, 2025
• linuxfoundation pytorch PyTorch torch.lstm_cell memory corruption CVE-2025-3001 Fix available 4.8 MediumMarch 31, 2025
• linuxfoundation pytorch PyTorch torch.jit.script memory corruption CVE-2025-3000 Fix available 4.8 MediumMarch 31, 2025
• linuxfoundation pytorch PyTorch torch.nn.utils.rnn.unpack_sequence memory corruption CVE-2025-2999 Fix available 4.8 MediumMarch 31, 2025
• linuxfoundation pytorch PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption CVE-2025-2998 Fix available 4.8 MediumMarch 31, 2025
• linuxfoundation pytorch PyTorch torch.mkldnn_max_pool2d denial of service CVE-2025-2953 Fix availableDisputed 4.8 MediumMarch 30, 2025
• pytorch pytorch/serve Unclaimed S3 Bucket Usage in pytorch/serve CVE-2024-6577 6.3 MediumMarch 20, 2025
• linuxfoundation pytorch PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization CVE-2025-2149 Fix available 2.0 LowMarch 10, 2025
• linuxfoundation pytorch PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption CVE-2025-2148 Fix available 2.3 LowMarch 10, 2025
• linuxfoundation pytorch In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. CVE-2024-48063 Fix availableDisputed 9.8 CriticalOctober 29, 2024
• pytorch serve, torchserve +1 more TorchServe gRPC Port Exposure CVE-2024-35199 Fix available 8.2 HighJuly 18, 2024
• pytorch serve, torchserve +1 more TorchServe bypass allowed_urls configuration CVE-2024-35198 Fix available 9.8 CriticalJuly 18, 2024
• linuxfoundation pytorch PyTorch heap buffer overflow vulnerability CVE-2024-31580 Fix available 4.0 MediumApril 17, 2024
• pytorch serve, torchserve +1 more TorchServe ZipSlip CVE-2023-48299 Fix available 5.3 MediumNovember 21, 2023
• pytorch serve, torchserve +1 more TorchServe Server-Side Request Forgery CVE-2023-43654 Public exploitFix available EPSS 42.5% 10.0 CriticalSeptember 28, 2023
• pytorch serve Path Traversal in serve CVE-2019-5415 Fix available 7.5 HighMarch 17, 2019
• pytorch serve Directory Traversal in serve CVE-2019-5417 Fix available 7.5 HighMarch 17, 2019