Junglewise Threat Intelligence

CVE-2025-46153: PYSEC-2025-202 - PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU impl

CVE-2025-46153 · Severity: low · CVSS 3.1 · Published 2025-09-25

Technologies: torch (PyPI). Vendors: PyPI.

Executive brief

PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True.

Affected products

  • PyPI torch

Related threats