~ / search / GHSA-3749-ghw9-m3mg

GHSA-3749-ghw9-m3mg

PyTorch susceptible to local Denial of Service

Source: GitHub Advisory Database (reviewed) Low CVE-2025-2953

Packages

EcosystemPackageAffectedFixed in
PyPI torch < 2.7.1-rc1 2.7.1-rc1

Details

As written in the advisory (Markdown source, shown as plain text).

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

References

External links from the advisory. They lead to third-party sites.