9.3
Critique
CVE-2025-32434 PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built…
Description
PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading a model using torch.load with weights_only=True. This issue has been patched in version 2.6.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| pytorch 2.6 | premières → < 2.6.0 | 2.6.0 |
Références
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de pytorch
Les 4 CVE de pytorch →
CVE-2026-24747
PyTorch is a Python package that provides tensor computation
8.8
Élevée
CVE-2024-48063
In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE
Non notée
CVE-2024-31580
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component…
4.0
Moyenne