Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 25

Export CSV
CVE-2026-123974

pytorch/serve: Local privilege escalation through insecure temporary path

In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and run code as the TorchServe service account leading to local privilege escalation.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Pytorch
Products
Torchserve
CVE-2026-65918

PyTorch torchvision GIF Decoder Out-of-bounds Heap Read

PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's read_from_tensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fault or disclose adjacent heap memory contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation Pytorch
Products
Torchvision Vision
CVE-2026-24747

PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that, when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to arbitrary code execution. Version 2.10.0 fixes the issue.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation Pytorch
Products
Pytorch Pytorch
CVE-2026-4538

PyTorch pt2 Loading deserialization

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation Pytorch
Products
Pytorch Pytorch
CVE-2025-4287

PyTorch nccl.py torch.cuda.nccl.reduce denial of service

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function torch.cuda.nccl.reduce of the file torch/cuda/nccl.py. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The patch is identified as 5827d2061dcb4acd05ac5f8e65d8693a481ba0f5. It is recommended to apply a patch to fix this issue.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Pytorch
Products
Pytorch
CVE-2025-63396

pytorch: PyTorch denial of service

An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS).

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation Pytorch
Products
Pytorch Pytorch
CVE-2025-55560

torch: PyTorch denial of service

An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation Pytorch
Products
Pytorch Pytorch
CVE-2025-55552

torch: PyTorch inconsistent results

pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation Pytorch
Products
Pytorch Pytorch
CVE-2025-55553

torch: PyTorch denial of service

A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation Pytorch
Products
Pytorch Pytorch
CVE-2025-55557

torch: PyTorch denial of service

A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation Pytorch
Products
Pytorch Pytorch
CVE-2025-55558

torch: PyTorch buffer overflow

A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a Denial of Service (DoS).

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation Pytorch
Products
Pytorch Pytorch
CVE-2025-46152

torch: PyTorch logic error

In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation Pytorch
Products
Pytorch Pytorch
CVE-2025-46153

torch: PyTorch inconsistent results

PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation Pytorch
Products
Pytorch Pytorch
CVE-2025-55551

torch: PyTorch denial of service

An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation Pytorch
Products
Pytorch Pytorch
CVE-2024-35199

TorchServe gRPC Port Exposure

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. In affected versions the two gRPC ports 7070 and 7071, are not bound to [localhost](http://localhost/) by default, so when TorchServe is launched, these two interfaces are bound to all interfaces. Customers using PyTorch inference Deep Learning Containers (DLC) through Amazon SageMaker and EKS are not affected. This issue in TorchServe has been fixed in PR #3083. TorchServe release 0.11.0 includes the fix to address this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Pytorch
Products
Torchserve
CVE-2024-35198

TorchServe bypass allowed_urls configuration

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. TorchServe 's check on allowed_urls configuration can be by-passed if the URL contains characters such as ".." but it does not prevent the model from being downloaded into the model store. Once a file is downloaded, it can be referenced without providing a URL the second time, which effectively bypasses the allowed_urls security check. Customers using PyTorch inference Deep Learning Containers (DLC) through Amazon SageMaker and EKS are not affected. This issue in TorchServe has been fixed by validating the URL without characters such as ".." before downloading see PR #3082. TorchServe release 0.11.0 includes the fix to address this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Pytorch
Products
Torchserve