CVE-2025-2953
Low
Description
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The security policy of the project warns to use unknown models which might establish malicious effects.
SeverityLow
CVSS3.3
Exploit probability—
ProductLinuxfoundation Pytorch
PublishedMar 30, 2025
First seenMar 30, 2025
Weakness typeCWE-404CWE-404
How to fix
Update
- torch2.7.1-rc1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linuxfoundation pytorch | 2.6.0\+cu124 | — |
| torchPyPI | v < 2.7.1-rc1, v ≤ 2.6.0+cu124 | 2.7.1-rc1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.