Approved changes feed: RSS · Atom
cpe:2.3:a:linuxfoundation:pytorch:*:*:*:*:*:python:*:*
part: a version: * update: *
| Vendor | Linuxfoundation (4b459c90-8cdb-5268-beb4-b69b5fe74234) |
|---|---|
| Product | Pytorch (52dd45c0-ec5b-5d93-8a94-340622257e2a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | python |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/pytorch |
purl2cpe | 2026-06-01 10:13:22.642542 |
pkg:deb/ubuntu/pytorch |
purl2cpe | 2026-06-01 10:13:22.642544 |
pkg:docker/pytorch/pytorch |
purl2cpe | 2026-06-01 10:13:22.642545 |
pkg:github/pytorch/pytorch |
purl2cpe | 2026-06-01 10:13:22.642547 |
pkg:gitlab/gitlab-gold/pytorch |
purl2cpe | 2026-06-01 10:13:22.642548 |
pkg:sourceforge/pytorch.mirror |
purl2cpe | 2026-06-01 10:13:22.642550 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24747 |
vulnerable | 2026-06-08 07:51:18.110919 |
PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files
HIGH (8.8)
PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that, when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to arbitrary code execution. Version 2.10.0 fixes the issue.
Published: 2026-01-27T21:13:46.878Z
Updated: 2026-07-15T01:17:00.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55560 |
vulnerable | 2026-06-08 07:33:15.026470 |
Details available
An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.
Published: 2025-09-25T00:00:00.000Z
Updated: 2025-09-26T19:39:24.967Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55558 |
vulnerable | 2026-06-08 07:33:15.025840 |
Details available
A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a Denial of Service (DoS).
Published: 2025-09-25T00:00:00.000Z
Updated: 2025-09-26T20:00:09.769Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55557 |
vulnerable | 2026-06-08 07:33:15.025579 |
Details available
A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).
Published: 2025-09-25T00:00:00.000Z
Updated: 2025-09-29T16:14:32.567Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55554 |
vulnerable | 2026-06-08 07:33:15.023105 |
Details available
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().
Published: 2025-09-25T00:00:00.000Z
Updated: 2025-09-26T19:57:13.791Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55553 |
vulnerable | 2026-06-08 07:33:15.022755 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55552 |
vulnerable | 2026-06-08 07:33:15.022474 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55551 |
vulnerable | 2026-06-08 07:33:15.021990 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46152 |
vulnerable | 2026-06-08 07:25:11.284457 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46150 |
vulnerable | 2026-06-08 07:25:11.284208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46149 |
vulnerable | 2026-06-08 07:25:11.283931 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46148 |
vulnerable | 2026-06-08 07:25:11.283577 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32434 |
vulnerable | 2026-06-08 07:18:59.790663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48063 |
vulnerable | 2026-06-08 06:48:13.599738 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31584 |
vulnerable | 2026-06-08 06:35:31.997871 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31583 |
vulnerable | 2026-06-08 06:35:31.997188 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31580 |
vulnerable | 2026-06-08 06:35:31.990982 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45907 |
vulnerable | 2026-06-08 05:50:37.479888 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.