Skip to content
OpenAdvisories
Critical DLA-4389-1 1 CVE

pytorch - security update

Published Dec 1, 2025 · Updated Dec 1, 2025

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 pytorch 1.7.1-7+deb11u1

Vulnerabilities 1

  • Critical 9.3
    CVE-2025-32434 Public exploit

    PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

    PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading…

    pytorch pytorch pytorch pytorch Debian Azure Linux PyPI