Launch Week Day 1: Announcing Security Design Review
LOW 3.3 PyPI

PyTorch susceptible to local Denial of Service

GHSA-3749-ghw9-m3mg · BIT-pytorch-2025-2953 · CVE-2025-2953 · PYSEC-2025-191

Published · Modified

Description

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Ready to move

Start Securing

Free, no credit card | First findings in minutes