affected:
- ecosystem_specific: {}
  package:
    ecosystem: PyPI
    name: torch
    purl: pkg:pypi/torch
  ranges:
  - events:
    - introduced: '0'
    - last_affected: 2.6.0+cu124
    type: ECOSYSTEM
  versions:
  - 1.0.0
  - 1.0.1
  - 1.1.0
  - 1.10.0
  - 1.10.1
  - 1.10.2
  - 1.11.0
  - 1.12.0
  - 1.12.1
  - 1.13.0
  - 1.13.1
  - 1.2.0
  - 1.3.0
  - 1.3.1
  - 1.4.0
  - 1.5.0
  - 1.5.1
  - 1.6.0
  - 1.7.0
  - 1.7.1
  - 1.8.0
  - 1.8.1
  - 1.9.0
  - 1.9.1
  - 2.0.0
  - 2.0.1
  - 2.1.0
  - 2.1.1
  - 2.1.2
  - 2.2.0
  - 2.2.1
  - 2.2.2
  - 2.3.0
  - 2.3.1
  - 2.4.0
  - 2.4.1
  - 2.5.0
  - 2.5.1
  - 2.6.0
aliases:
- CVE-2025-2953
- GHSA-3749-ghw9-m3mg
details: A vulnerability, which was classified as problematic, has been found in PyTorch
  2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. The
  manipulation leads to denial of service. An attack has to be approached locally.
  The exploit has been disclosed to the public and may be used. The real existence
  of this vulnerability is still doubted at the moment. The security policy of the
  project warns to use unknown models which might establish malicious effects.
id: PYSEC-2025-191
modified: '2026-05-21T14:54:44.011147Z'
published: '2025-03-30T16:15:14.380Z'
references:
- type: WEB
  url: https://github.com/pytorch/pytorch/blob/main/SECURITY.md#untrusted-models
- type: ADVISORY
  url: https://vuldb.com/?id.302006
- type: ADVISORY
  url: https://vuldb.com/?submit.521279
- type: REPORT
  url: https://github.com/pytorch/pytorch/issues/149274
- type: REPORT
  url: https://github.com/pytorch/pytorch/issues/149274#issue-2923122269
- type: REPORT
  url: https://vuldb.com/?ctiid.302006
- type: ADVISORY
  url: https://github.com/advisories/GHSA-3749-ghw9-m3mg
severity:
- score: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  type: CVSS_V3