PY
Product
Pytorch
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 10Medium 15Low 3
Watch
Add Pytorch to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24747 | 8.8 | Jan 27 | PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files Affected: before 2.10.0 |
| CVE-2026-4538 | 7.8 | Mar 22 | PyTorch pt2 Loading deserialization Affected: 2.10.0 |
| CVE-2024-31583 | 7.8 | Apr 17 | Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp Affected: before 2.2.0 |
| CVE-2025-55560 | 7.5 | Sep 25 | An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor Affected: through 2.7.0 |
| CVE-2025-55558 | 7.5 | Sep 25 | A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by… Affected: through 2.7.0 |
| CVE-2025-55557 | 7.5 | Sep 25 | A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS) Affected: through 2.7.0 |
| CVE-2025-55553 | 7.5 | Sep 25 | A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS) Affected: through 2.7.0 |
| CVE-2025-55552 | 7.5 | Sep 25 | pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together Affected: through 2.8.0 |
| CVE-2025-55551 | 7.5 | Sep 25 | An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation Affected: through 2.8.0 |
| CVE-2025-2148 | 7.5 | Mar 10 | A vulnerability was found in PyTorch 2.6.0+cu124 Affected: 2.6.0 |
Showing 10