Medium severity · published Mar 30, 2025
CVE-2025-2953
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124
5.5
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The security policy of the project warns to use unknown models which might establish malicious effects.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PY
Pytorch · Linuxfoundation
2.6.0+cu124 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-2953
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-2953
github.com
https://github.com/pytorch/pytorch/blob/main/SECURITY.md#untrusted-models
Exploit
https://github.com/pytorch/pytorch/issues/149274
Exploit
https://github.com/pytorch/pytorch/issues/149274#issue-2923122269
Permissions Required
https://vuldb.com/?ctiid.302006
Third Party Advisory
https://vuldb.com/?id.302006
Third Party Advisory
https://vuldb.com/?submit.521279
More from Pytorch
9.8
CVE-2025-32434
PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system
9.8
CVE-2024-48063
In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE
9.8
CVE-2022-45907
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely
8.8
CVE-2026-24747
PyTorch is a Python package that provides tensor computation
7.8
CVE-2026-4538
PyTorch pt2 Loading deserialization
