CVE-2025-55558
1 advisory.
PyPI/torch CVE-2025-55558: high 7.5
A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a
Action: Upgrade torch to 2.7.1 or later.
pip install torch==2.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.1 | - |
Fixed versions
| 2.7.1 |
Sources
- osv: PYSEC-2025-208
- https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc
- https://github.com/pytorch/pytorch/issues/151523
- https://github.com/pytorch/pytorch/pull/151887
CVE-2025-55558 · published · modified · JSON