CVE-2025-46150

torch: PyTorch inconsistent results

In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Linuxfoundation Pytorch

Products

Pytorch Pytorch

CVE-2025-46152

torch: PyTorch logic error

In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Linuxfoundation Pytorch

Products

Pytorch Pytorch

CVE-2025-46153

torch: PyTorch inconsistent results

PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Linuxfoundation Pytorch

Products

Pytorch Pytorch

CVE-2025-55551

torch: PyTorch denial of service

An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Linuxfoundation Pytorch

Products

Pytorch Pytorch

CVE-2024-40635

containerd has an integer overflow in User ID handling

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Linuxfoundation

Products

Debian Linux Containerd

CVE-2025-47290

Containerd vulnerable to host filesystem access during image unpack

containerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0. While unpacking an image during an image pull, specially crafted container images could arbitrarily modify the host file system. The only affected version of containerd is 2.1.0. Other versions of containerd are not affected. This bug has been fixed in containerd 2.1.1. Users should update to this version to resolve the issue. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.

CVSS 4.0 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Linuxfoundation

Products

Containerd

CVE-2025-47291

containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.

containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd, starting in version 2.0.1 and prior to version 2.0.5, doesn't put usernamespaced containers under the Kubernetes' cgroup hierarchy, therefore some Kubernetes limits are not honored. This may cause a denial of service of the Kubernetes node. This bug has been fixed in containerd 2.0.5+ and 2.1.0+. Users should update to these versions to resolve the issue. As a workaround, disable usernamespaced pods in Kubernetes temporarily.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Linuxfoundation

Products

Containerd

CVE-2025-59346

Dragonfly server-side request forgery vulnerability

Dragonfly is an open source P2P-based file distribution and image acceleration system. Versions prior to 2.1.0 contain a server-side request forgery (SSRF) vulnerability that enables users to force DragonFly2’s components to make requests to internal services that are otherwise not accessible to them. The issue arises because the Manager API accepts a user-supplied URL when creating a Preheat job with weak validation, peers can trigger other peers to fetch an arbitrary URL through pieceManager.DownloadSource, and internal HTTP clients follow redirects, allowing a request to a malicious server to be redirected to internal services. This can be used to probe or access internal HTTP endpoints. The vulnerability is fixed in version 2.1.0.

CVSS 4.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Dragonflyoss Linuxfoundation

Products

Dragonfly2 Dragonfly

CVE-2025-59347

Dragonfly Manager makes requests to external endpoints with disabled TLS authentication

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The Manager disables TLS certificate verification in HTTP clients. The clients are not configurable, so users have no way to re-enable the verification. A Manager processes dozens of preheat jobs. An adversary performs a network-level Man-in-the-Middle attack, providing invalid data to the Manager. The Manager preheats with the wrong data, which later causes a denial of service and file integrity problems. This vulnerability is fixed in 2.1.0.

CVSS 4.0 · 2.7 Low EPSS < 1% KEV · Not listed

Vendors

Dragonflyoss Linuxfoundation

Products

Dragonfly2 Dragonfly

CVE-2025-59348

Dragonfly incorrectly handles a task structure’s usedTraffic field

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the processPieceFromSource method does not update the structure’s usedTraffic field, because an uninitialized variable n is used as a guard to the AddTraffic method call, instead of the result.Size variable. A task is processed by a peer. The usedTraffic metadata is not updated during the processing. Rate limiting is incorrectly applied, leading to a denial-of-service condition for the peer. This vulnerability is fixed in 2.1.0.

CVSS 4.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Dragonflyoss Linuxfoundation

Products

Dragonfly2 Dragonfly

CVE-2025-59349

Directories created via os.MkdirAll are not checked for permissions

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, DragonFly2 uses the os.MkdirAll function to create certain directory paths with specific access permissions. This function does not perform any permission checks when a given directory path already exists. This allows a local attacker to create a directory to be used later by DragonFly2 with broad permissions before DragonFly2 does so, potentially allowing the attacker to tamper with the files. This vulnerability is fixed in 2.1.0.

CVSS 4.0 · 2 Low EPSS < 1% KEV · Not listed

Vendors

Dragonflyoss Linuxfoundation

Products

Dragonfly2 Dragonfly

CVE-2025-59350

Timing attacks against Proxy’s basic authentication are possible

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the access control mechanism for the Proxy feature uses simple string comparisons and is therefore vulnerable to timing attacks. An attacker may try to guess the password one character at a time by sending all possible characters to a vulnerable mechanism and measuring the comparison instruction’s execution times. This vulnerability is fixed in 2.1.0.

CVSS 4.0 · 2.7 Low EPSS < 1% KEV · Not listed

Vendors

Dragonflyoss Linuxfoundation

Products

Dragonfly2 Dragonfly

CVE-2025-59351

Dragonfly possibly panics due to nil pointer dereference when using variables created alongside an error

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the first return value of a function is dereferenced even when the function returns an error. This can result in a nil dereference, and cause code to panic. This vulnerability is fixed in 2.1.0.

CVSS 4.0 · 2.7 Low EPSS < 1% KEV · Not listed

Vendors

Dragonflyoss Linuxfoundation

Products

Dragonfly2 Dragonfly

CVE-2025-59352

Dragonfly allows arbitrary file read and write on a peer machine

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal other peers’ secret data and to gain remote code execution (RCE) capabilities on the peer’s machine.This vulnerability is fixed in 2.1.0.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Dragonflyoss Linuxfoundation

Products

Dragonfly2 Dragonfly

CVE-2025-59353

Manager generates mTLS certificates for arbitrary IP addresses

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, a peer can obtain a valid TLS certificate for arbitrary IP addresses, effectively rendering the mTLS authentication useless. The issue is that the Manager’s Certificate gRPC service does not validate if the requested IP addresses “belong to” the peer requesting the certificate—that is, if the peer connects from the same IP address as the one provided in the certificate request. This vulnerability is fixed in 2.1.0.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed

Vendors

Dragonflyoss Linuxfoundation

Products

Dragonfly2 Dragonfly

CVE-2025-59354

Dragonfly has weak integrity checks for downloaded files

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the DragonFly2 uses a variety of hash functions, including the MD5 hash, for downloaded files. This allows attackers to replace files with malicious ones that have a colliding hash. This vulnerability is fixed in 2.1.0.

CVSS 4.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Dragonflyoss Linuxfoundation

Products

Dragonfly2 Dragonfly

CVE-2025-59410

Dragonfly tiny file download uses hard coded HTTP protocol

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the code in the scheduler for downloading a tiny file is hard coded to use the HTTP protocol, rather than HTTPS. This means that an attacker could perform a Man-in-the-Middle attack, changing the network request so that a different piece of data gets downloaded. This vulnerability is fixed in 2.1.0.

CVSS 4.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Dragonflyoss Linuxfoundation

Products

Dragonfly2 Dragonfly

CVE-2025-53009

MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit

MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In versions 1.39.2 and below, when parsing an MTLX file with multiple nested nodegraph implementations, the MaterialX XML parsing logic can potentially crash due to stack exhaustion. An attacker could intentionally crash a target program that uses OpenEXR by sending a malicious MTLX file. This is fixed in version 1.39.3.

CVSS 4.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Linuxfoundation

Products

Materialx

CVE-2025-53010

MaterialX's unchecked nodeGraph->getOutput return is vulnerable to NULL Pointer Dereference

MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, when parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously crafted files. An attacker could intentionally crash a target program that uses OpenEXR by sending a malicious MTLX file. This is fixed in version 1.39.3.

CVSS 4.0 · 2 Low EPSS < 1% KEV · Not listed

Vendors

Linuxfoundation

Products

Materialx

CVE-2025-53011

MaterialX is Vulnerable to NULL Pointer Dereference due to Unchecked implGraphOutput

MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, when parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously crafted files. An attacker could intentionally crash a target program that uses MaterialX by sending a malicious MTLX file. This is fixed in version 1.39.3.

CVSS 4.0 · 2 Low EPSS < 1% KEV · Not listed

Vendors

Linuxfoundation

Products

Materialx