CVE-2025-63396
1 advisory.
PyPI/torch CVE-2025-63396: low 3.3, EPSS 0.13%
An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (Do
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.5.0-NA |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-210
- http://pytorch.com
- https://github.com/Daisy2ang
- https://github.com/pytorch/pytorch/issues/156563
- https://github.com/pytorch/pytorch
CVE-2025-63396 · published · modified · JSON