4.8
Medium
CVE-2025-2953 A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124
Description
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The security policy of the project warns to use unknown models which might establish malicious effects.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PyTorch | 2.6.0+cu124 | No fix stated |
References
- VDB-302006 | PyTorch torch.mkldnn_max_pool2d denial of service vuldb.com
- VDB-302006 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #521279 | pytorch PyTorch version: 2.6.0+cu124 Floating point exception vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of PyTorch
The 12 CVEs of PyTorch →
CVE-2026-4538
A vulnerability was identified in PyTorch 2.10.0
4.8
Medium
CVE-2025-4287
A vulnerability was found in PyTorch 2.6.0+cu124
4.8
Medium
CVE-2025-3730
A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0
4.8
Medium
CVE-2025-3136
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0
4.8
Medium