Executive brief
In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.
Affected products
- PyPI torch
Junglewise Threat Intelligence
CVE-2025-46152: PYSEC-2025-201 - In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.
CVE-2025-46152 · Severity: low · CVSS 3.1 · Published 2025-09-25
Technologies: torch (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1970 - PyTorch Improper Resource Shutdown or Release vulnerability
- PYSEC-2026-139 - A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The mani
- PyTorch arbitrary code execution in weights_only unpickler
- PyTorch denial of service in torch.profiler.profile
- PYSEC-2025-209 - An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.