Summary
Ein Angreifer kann mehrere Schwachstellen in PyTorch ausnutzen, um Informationen offenzulegen, einen Denial-of-Service-Zustand zu erzeugen oder andere nicht näher spezifizierte Angriffe durchzuführen.
Product
PyTorch ist eine Tensor-Bibliothek für Deep Learning mit GPUs und CPUs.
Vulnerabilities 12
-
High 7.5
An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when pe…
-
High 7.5
A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).
-
High 7.5
A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leadin…
-
High 7.5
A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardsh…
-
High 7.5
An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_spars…
-
Medium 5.3
In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.
-
Medium 5.3
In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.
-
Medium 5.3
In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.
-
Medium 5.3
In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" …
-
Medium 5.3
PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency wi…
-
Medium 5.3
pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are u…
-
Medium 5.3
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().
Revision history
-
#1
Initiale Fassung
References
-
GitHub Security Advisory GHSA-m7x9-2m87-mqhf vom 2025-09-25
https://github.com/advisories/GHSA-m7x9-2m87-mqhf
-
GitHub Security Advisory GHSA-fw73-7p7w-p28m vom 2025-09-25
https://github.com/advisories/GHSA-fw73-7p7w-p28m
-
GitHub Security Advisory GHSA-v5f2-jg66-6h4h vom 2025-09-25
https://github.com/advisories/GHSA-v5f2-jg66-6h4h
-
GitHub Security Advisory GHSA-x8x6-v465-7v88 vom 2025-09-25
https://github.com/advisories/GHSA-x8x6-v465-7v88
-
GitHub Security Advisory GHSA-h36m-9qjr-pv93 vom 2025-09-25
https://github.com/advisories/GHSA-h36m-9qjr-pv93
-
GitHub Security Advisory GHSA-8f2w-3w4c-pwj2 vom 2025-09-25
https://github.com/advisories/GHSA-8f2w-3w4c-pwj2
-
GitHub Security Advisory GHSA-mf74-qwpw-gj2w vom 2025-09-25
https://github.com/advisories/GHSA-mf74-qwpw-gj2w
-
GitHub Security Advisory GHSA-2qm5-pr8v-rjvp vom 2025-09-25
https://github.com/advisories/GHSA-2qm5-pr8v-rjvp
-
GitHub Security Advisory GHSA-f9wh-qr6g-v2h4 vom 2025-09-25
https://github.com/advisories/GHSA-f9wh-qr6g-v2h4
-
GitHub Security Advisory GHSA-765F-85MC-5QMW vom 2025-09-25
https://github.com/advisories/GHSA-765F-85MC-5QMW
-
GitHub Security Advisory GHSA-79PG-RRP8-8WQM vom 2025-09-25
https://github.com/advisories/GHSA-79pg-rrp8-8wqm
-
GitHub Security Advisory GHSA-mxhp-68x5-j3fx vom 2025-09-25
https://github.com/advisories/GHSA-mxhp-68x5-j3fx