Approved changes feed: RSS · Atom
cpe:2.3:a:linuxfoundation:pytorch:2.6.0:cu124:*:*:*:python:*:*
part: a version: 2.6.0 update: cu124
| Vendor | Linuxfoundation (4b459c90-8cdb-5268-beb4-b69b5fe74234) |
|---|---|
| Product | Pytorch (52dd45c0-ec5b-5d93-8a94-340622257e2a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | python |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/pytorch |
purl2cpe | 2026-06-01 10:13:22.614027 |
pkg:deb/ubuntu/pytorch |
purl2cpe | 2026-06-01 10:13:22.614029 |
pkg:docker/pytorch/pytorch |
purl2cpe | 2026-06-01 10:13:22.614030 |
pkg:github/pytorch/pytorch |
purl2cpe | 2026-06-01 10:13:22.614032 |
pkg:gitlab/gitlab-gold/pytorch |
purl2cpe | 2026-06-01 10:13:22.614033 |
pkg:sourceforge/pytorch.mirror |
purl2cpe | 2026-06-01 10:13:22.614034 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2149 |
vulnerable | 2026-06-08 07:14:58.175343 |
PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization
LOW (2.5)
A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zero_point leads to improper initialization. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
Published: 2025-03-10T12:31:04.788Z
Updated: 2025-03-10T14:08:14.533Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2148 |
vulnerable | 2026-06-08 07:14:58.174594 |
PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption
MEDIUM (5)
A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler._call_end_callbacks_on_jit_fut of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult.
Published: 2025-03-10T12:00:07.912Z
Updated: 2025-03-10T14:10:36.958Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.