Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

torch

31 known vulnerabilities (2 critical, 7 high, 18 medium, 3 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
31 · 2 critical, 7 high, 18 medium, 3 low
Weekly downloads
14.6M
Dependents
26.1K
Registry
PyPI

Advisories 31

  • CVE-2026-4538Medium 4.8

    PyTorch pt2 Loading deserialization

    Affected: through 2.10.0.

  • PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

    Affected: fixed in 2.10.0.

  • An issue was discovered in PyTorch v2.5 and v2.7.1.

    Affected: through 2.5.0-NA; through 2.7.1-NA.

  • An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and…

    Affected: fixed in 2.7.1.

  • A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and…

    Affected: fixed in 2.7.1.

  • A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of…

    Affected: fixed in 2.7.1.

  • CVE-2025-55554Medium 5.3

    pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().

    Affected: fixed in 2.9.0.

  • A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).

    Affected: fixed in 2.7.1.

  • CVE-2025-55552Medium 5.3

    pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.

    Affected: fixed in 2.9.0.

  • An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice…

    Affected: fixed in 2.9.0.

  • CVE-2025-46153Medium 5.3

    PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU…

    Affected: from 2.6.0, fixed in 2.7.0.

  • CVE-2025-46152Medium 5.3

    In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.

    Affected: from 2.6.0, fixed in 2.7.0.

  • CVE-2025-46150Medium 5.3

    In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.

    Affected: from 2.6.0, fixed in 2.7.0.

  • CVE-2025-46149Medium 5.3

    In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.

    Affected: from 2.6.0, fixed in 2.7.0.

  • CVE-2025-46148Medium 5.3

    In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.

    Affected: fixed in 2.7.0.

Show all 31 advisoriesShow fewer advisories
  • CVE-2025-32434Critical 9.3

    PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

    Affected: fixed in 2.6.0.

  • CVE-2025-3730Medium 4.8

    PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of service

    Affected: fixed in 2.8.0.

  • CVE-2025-3136Medium 4.8

    PyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_allocator_delete memory corruption

    Affected: through 2.6.0-NA.

  • CVE-2025-3121Medium 4.8

    PyTorch torch.jit.jit_module_from_flatbuffer memory corruption

    Affected: through 2.6.0-NA.

  • CVE-2025-3001Medium 4.8

    PyTorch torch.lstm_cell memory corruption

    Affected: fixed in 2.10.0; through 2.6.0-NA.

  • CVE-2025-3000Medium 4.8

    PyTorch torch.jit.script memory corruption

    Affected: fixed in 2.13.0; through 2.6.0-NA.

  • CVE-2025-2999Medium 4.8

    PyTorch torch.nn.utils.rnn.unpack_sequence memory corruption

    Affected: fixed in 2.9.1; through 2.6.0-NA.

  • CVE-2025-2998Medium 4.8

    PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption

    Affected: through 2.6.0; through 2.6.0-NA.

  • CVE-2025-2953Medium 4.8

    PyTorch torch.mkldnn_max_pool2d denial of service

    Affected: through 2.6.0+cu124; fixed in 2.7.1-rc1.

  • PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization

    Affected: through 2.6.0; through 2.6.0-cu124.

  • PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption

    Affected: through 2.6.0-cu124; through 2.6.0.

  • In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE.

    Affected: fixed in 2.5.0.

  • CVE-2024-31584Medium 5.5

    Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.

    Affected: fixed in 2.2.0.

  • Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.

    Affected: fixed in 2.2.0; fixed in 2.2.0.

  • CVE-2024-31580Medium 4.0

    PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp.

    Affected: fixed in 2.2.0; fixed in 2.2.0.

  • CVE-2022-45907Critical 9.8

    In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.

    Affected: fixed in 1.13.1; fixed in 1.13.1.