CVE-2025-55560

PYSEC-2025-209 · BIT-pytorch-2025-55560 · CVE-2025-55560

Published Sep 25, 2025 · Modified May 20, 2026

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.

References

ADVISORY https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc
REPORT https://github.com/pytorch/pytorch/issues/151522
FIX https://github.com/pytorch/pytorch/pull/151897

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes

CVE-2025-55560

Description

References

More PyPI vulnerabilities

Start Securing