pkg:Debian/pytorch

共 34 筆 CVECRITICAL4HIGH11MEDIUM8LOW3

✅ 檢查你的版本

所有已知漏洞

  • CRITICAL9.8CVE-2025-32434PyTorch: `torch.load` with `weights_only=True` leads to remote code execution
    from 0, < 1.7.1-7+deb11u1
  • CRITICAL9.8CVE-2025-32434PyTorch: `torch.load` with `weights_only=True` leads to remote code execution
    from 0, < 1.7.1-7+deb11u1
  • CRITICAL9.8CVE-2024-48063In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE.
    from 0
  • CRITICAL9.8CVE-2022-45907PyTorch vulnerable to arbitrary code execution
    from 0
  • HIGH8.8CVE-2026-24747PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files
    from 0
  • HIGH7.8CVE-2026-4538PyTorch pt2 Loading deserialization
    from 0
  • HIGH7.8CVE-2024-31583Pytorch use-after-free vulnerability
    from 0
  • HIGH7.5CVE-2025-55560An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor…
    from 0
  • HIGH7.5CVE-2025-55558A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tens…
    from 0
  • HIGH7.5CVE-2025-55557A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Ser…
    from 0
  • HIGH7.5CVE-2025-55553A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).
    from 0
  • HIGH7.5CVE-2025-55552pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.
    from 0
  • HIGH7.5CVE-2025-55551An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice ope…
    from 0
  • HIGH7.5CVE-2025-2148PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption
    from 0
  • HIGH7.5CVE-2024-31580PyTorch heap buffer overflow vulnerability
    from 0
  • MEDIUM5.5CVE-2025-3121PyTorch torch.jit.jit_module_from_flatbuffer memory corruption
    from 0
  • MEDIUM5.5CVE-2024-31584Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.
    from 0
  • MEDIUM5.3CVE-2025-55554pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().
    from 0
  • MEDIUM5.3CVE-2025-46153PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU imp…
    from 0
  • MEDIUM5.3CVE-2025-46152In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.
    from 0
  • MEDIUM5.3CVE-2025-46150In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.
    from 0
  • MEDIUM5.3CVE-2025-46149In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.
    from 0
  • MEDIUM5.3CVE-2025-46148In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.
    from 0
  • LOW3.3CVE-2025-63396An issue was discovered in PyTorch v2.5 and v2.7.1.
    from 0
  • LOW3.3CVE-2025-3730PyTorch Improper Resource Shutdown or Release vulnerability
    from 0
  • LOW3.3CVE-2025-2953PyTorch torch.mkldnn_max_pool2d denial of service
    from 0
  • CVE-2025-4287A vulnerability was found in PyTorch 2.6.0+cu124.
    from 0
  • CVE-2025-3136PyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_allocator_delete memory corruption
    from 0
  • CVE-2025-3001PyTorch torch.lstm_cell memory corruption
    from 0
  • CVE-2025-3000PyTorch torch.jit.script memory corruption
    from 0
  • CVE-2025-2999PyTorch torch.nn.utils.rnn.unpack_sequence memory corruption
    from 0
  • CVE-2025-2998PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption
    from 0
  • CVE-2025-2149PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization
    from 0
  • CVE-2024-5480A vulnerability in the PyTorch's torch.distributed.rpc framework, specifically in versions prior to 2.2.2, allows for remote code execution…
    from 0