Priority MEDIUM 55
A vulnerability was identified in PyTorch 2.10.0.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00243 · Published 2026-03-22 · No fix listed CWE-20
Priority MEDIUM 41
PyTorch is a Python package that provides tensor computation.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00799 · Published 2026-01-27 · Fixed in 2.10.0 CWE-502
Priority LOW 15
An issue was discovered in PyTorch v2.5 and v2.7.1.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00133 · Published 2025-11-12 · Fix deferred CWE-667
Priority LOW 39
An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00411 · Published 2025-09-25 · Fix deferred CWE-400
Priority HIGH 66
A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a Denial of Service (D…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00454 · Published 2025-09-25 · Fix deferred CWE-400
Priority HIGH 72
A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00408 · Published 2025-09-25 · Fix deferred CWE-248
Priority LOW 24
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00315 · Published 2025-09-25 · Fix deferred CWE-190
Priority HIGH 72
A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00408 · Published 2025-09-25 · Fix deferred CWE-248
Priority HIGH 72
pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00418 · Published 2025-09-25 · Fix deferred CWE-682
Priority HIGH 72
An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00423 · Published 2025-09-25 · Fix deferred CWE-400
Priority LOW 24
PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d fo…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00419 · Published 2025-09-25 · Fix deferred CWE-1176
Priority LOW 24
In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00453 · Published 2025-09-25 · Fix deferred CWE-787
Priority LOW 24
In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00385 · Published 2025-09-25 · Fix deferred
Priority LOW 24
In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00363 · Published 2025-09-25 · Fix deferred CWE-617
Priority LOW 24
In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00401 · Published 2025-09-25 · Fix deferred
Priority MEDIUM 53
PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.02369 · Published 2025-04-18 · Fixed in 2.6.0 CWE-502
Priority MEDIUM 55
A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00331 · Published 2025-04-16 · Fixed in 2.8.0 CWE-404
Priority MEDIUM 55
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2025-04-03 · No fix listed CWE-119
Priority MEDIUM 55
A vulnerability classified as problematic has been found in PyTorch 2.6.0.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.0028 · Published 2025-04-02 · No fix listed CWE-119
Priority MEDIUM 55
A vulnerability classified as critical was found in PyTorch 2.6.0.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2025-03-31 · Fixed in 2.10.0 CWE-119
Priority LOW 21
A vulnerability classified as critical has been found in PyTorch 2.6.0.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00203 · Published 2025-03-31 · Fixed in 2.13.0 CWE-119
Priority LOW 21
A vulnerability was found in PyTorch 2.6.0.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2025-03-31 · Fixed in 2.9.1 CWE-119
Priority MEDIUM 55
A vulnerability was found in PyTorch 2.6.0.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2025-03-31 · No fix listed CWE-119
Priority MEDIUM 55
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00261 · Published 2025-03-30 · Partial fix · 2.7.1-rc1 CWE-404
Priority MEDIUM 44
A vulnerability was found in PyTorch 2.6.0+cu124.
CVSS 4.0LOW 2.0· Local · Low privileges · No interaction · EPSS 0.00257 · Published 2025-03-10 · No fix listed CWE-665
Load more