PT-2025-13623 · Pytorch+1 · Pytorch+1

Default436352 · Published 2025-03-30 · Updated 2026-02-21 · CVE-2025-2953

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions PyTorch version 2.6.0+cu124

Description A problematic issue has been found, affecting the function torch.mkldnn max pool2d, which can lead to denial of service. The manipulation requires a local approach.

Recommendations For PyTorch version 2.6.0+cu124, as a temporary workaround, consider disabling the torch.mkldnn max pool2d function until a patch is available.

Exploit

Fix

DoS

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

AZL-60913

AZL-60931

BIT-PYTORCH-2025-2953

CVE-2025-2953

GHSA-3749-GHW9-M3MG

PYSEC-2025-191

Affected Products

Debian

Pytorch

References · 25

• 🔥 https://github.com/pytorch/pytorch/issues/149274#issue-2923122269 · Exploit
• 🔥 https://github.com/pytorch/pytorch/issues/149274 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-2953 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3749-ghw9-m3mg · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2025-191 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-2953 · Security Note
• https://osv.dev/vulnerability/BIT-pytorch-2025-2953 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-2953 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-2953 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-60931 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-2953 · Security Note
• https://ubuntu.com/security/CVE-2025-2953 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-2953 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-60913 · Vendor Advisory
• https://github.com/pytorch/pytorch/blob/main/SECURITY.md#untrusted-models · Note