CVE-2025-55558: PYSEC-2025-208 - A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tenso

CVE-2025-55558 · Severity: low · CVSS 3.1 · Published 2025-09-25

Technologies: torch (PyPI). Vendors: PyPI.

Executive brief

A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a Denial of Service (DoS).

Affected products

PyPI torch

Related threats

PYSEC-2026-1970 - PyTorch Improper Resource Shutdown or Release vulnerability
PYSEC-2026-139 - A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The mani
PyTorch arbitrary code execution in weights_only unpickler
PyTorch denial of service in torch.profiler.profile
PYSEC-2025-209 - An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.