backstage

In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE.

A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).

A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).

pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.

An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.

A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a Denial of Service (D…

A vulnerability was identified in PyTorch 2.10.0.

A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0.

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0.

A vulnerability classified as problematic has been found in PyTorch 2.6.0.

A vulnerability classified as critical was found in PyTorch 2.6.0.

A vulnerability was found in PyTorch 2.6.0.

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124.

PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system.

In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.

A vulnerability was found in PyTorch 2.6.0+cu124.

A vulnerability was found in PyTorch 2.6.0+cu124.

PyTorch is a Python package that provides tensor computation.

An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.

Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.

pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().

PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d fo…

In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.

In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.