CVE-2025-55560

Опубликовано: 25 сент. 2025

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.

Ссылки

https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc
Third Party Advisory
https://github.com/pytorch/pytorch/issues/151522
Issue Tracking
https://github.com/pytorch/pytorch/pull/151897
Issue Tracking
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:linuxfoundation:pytorch:*:*:*:*:*:python:*:*

Версия до 2.7.0 (включая)

EPSS

Процентиль: 31%

0.00118

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-400

Связанные уязвимости

CVE-2025-55560

CVSS3: 7.5

ubuntu

6 месяцев назад

An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.

CVE-2025-55560

CVSS3: 2.5

redhat

6 месяцев назад

An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.

CVE-2025-55560

CVSS3: 7.5

msrc

6 месяцев назад

An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.

CVE-2025-55560

CVSS3: 7.5

debian

6 месяцев назад

An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when ...

GHSA-mxhp-68x5-j3fx

CVSS3: 7.5

github

6 месяцев назад

An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.

EPSS

Процентиль: 31%

0.00118

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-400