PY
Product
Pytorch
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 10Medium 15Low 3
Watch
Add Pytorch to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-32434 | 9.8 | Apr 18 | PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system Affected: before 2.6.0 |
| CVE-2024-48063 | 9.8 | Oct 29 | In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE Affected: through 2.4.1 |
| CVE-2022-45907 | 9.8 | Nov 26 | In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely Affected: before 1.13.1 |
| CVE-2026-24747 | 8.8 | Jan 27 | PyTorch is a Python package that provides tensor computation Affected: before 2.10.0 |
| CVE-2026-4538 | 7.8 | Mar 22 | A vulnerability was identified in PyTorch 2.10.0 Affected: 2.10.0 |
| CVE-2024-31583 | 7.8 | Apr 17 | Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp Affected: before 2.2.0 |
| CVE-2025-55560 | 7.5 | Sep 25 | An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor Affected: through 2.7.0 |
| CVE-2025-55558 | 7.5 | Sep 25 | A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by… Affected: through 2.7.0 |
| CVE-2025-55557 | 7.5 | Sep 25 | A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS) Affected: through 2.7.0 |
| CVE-2025-55553 | 7.5 | Sep 25 | A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS) Affected: through 2.7.0 |
| CVE-2025-55552 | 7.5 | Sep 25 | pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together Affected: through 2.8.0 |
| CVE-2025-55551 | 7.5 | Sep 25 | An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation Affected: through 2.8.0 |
| CVE-2025-2148 | 7.5 | Mar 10 | A vulnerability was found in PyTorch 2.6.0+cu124 Affected: 2.6.0 |
| CVE-2025-3730 | 5.5 | Apr 16 | A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0 Affected: 2.6.0 |
| CVE-2025-3121 | 5.5 | Apr 2 | A vulnerability classified as problematic has been found in PyTorch 2.6.0 Affected: 2.6.0 |
| CVE-2025-2953 | 5.5 | Mar 30 | A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124 Affected: 2.6.0+cu124 |
| CVE-2024-31584 | 5.5 | Apr 19 | Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp Affected: before 2.2.0 |
| CVE-2025-55554 | 5.3 | Sep 25 | pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long() Affected: through 2.8.0 |
| CVE-2025-46153 | 5.3 | Sep 25 | PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting… Affected: 2.6.0 before 2.7.0 |
| CVE-2025-46152 | 5.3 | Sep 25 | In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument Affected: 2.6.0 before 2.7.0 |
| CVE-2025-46150 | 5.3 | Sep 25 | In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results Affected: 2.6.0 before 2.7.0 |
| CVE-2025-46149 | 5.3 | Sep 25 | In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error Affected: 2.6.0 before 2.7.0 |
| CVE-2025-46148 | 5.3 | Sep 25 | In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results Affected: through 2.6.0 |
| CVE-2025-3001 | 5.3 | Mar 31 | A vulnerability classified as critical was found in PyTorch 2.6.0 Affected: 2.6.0 |
| CVE-2025-3000 | 5.3 | Mar 31 | A vulnerability classified as critical has been found in PyTorch 2.6.0 Affected: 2.6.0 |
| CVE-2025-2999 | 5.3 | Mar 31 | A vulnerability was found in PyTorch 2.6.0 Affected: 2.6.0 |
| CVE-2025-2998 | 5.3 | Mar 31 | A vulnerability was found in PyTorch 2.6.0 Affected: 2.6.0 |
| CVE-2024-31580 | 4.0 | Apr 17 | PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp Affected: before 2.2.0 |
| CVE-2025-63396 | 3.3 | Nov 12 | An issue was discovered in PyTorch v2.5 and v2.7.1 Affected: 2.5.0; 2.7.1 |
| CVE-2025-3136 | 3.3 | Apr 3 | A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0 Affected: 2.6.0 |
| CVE-2025-2149 | 2.5 | Mar 10 | A vulnerability was found in PyTorch 2.6.0+cu124 Affected: 2.6.0 |
Showing 31
