Skip to content
OpenAdvisories

Package · Debian

pytorch

33 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-32434 Public exploit

    PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

    PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading…

    pytorch pytorch pytorch torch Debian PyPI
  • Critical 9.8
    CVE-2024-48063

    In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this i…

    pytorch pytorch torch Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2022-45907

    PyTorch vulnerable to arbitrary code execution

    In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.

    pytorch pytorch torch Debian Ubuntu PyPI