PT-2025-39380 · Facebook+1 · Pytorch+1

Published 2025-02-25 · Updated 2025-10-05 · CVE-2025-46149

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PyTorch versions prior to 2.7.0

Description When inductor is used, nn.Fold experiences an assertion error.

Recommendations Update to version 2.7.0 or later.

Fix

Buffer Overflow

Assertion Failure

Weakness Enumeration

CWE-119

CWE-617

Related Identifiers

BDU:2025-13131

BIT-PYTORCH-2025-46149

CVE-2025-46149

PYSEC-2025-199

Affected Products

Debian

Pytorch

References · 15

• https://github.com/pytorch/pytorch/pull/147961 · Patch
• https://osv.dev/vulnerability/PYSEC-2025-199 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-46149 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-46149 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-46149 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-pytorch-2025-46149 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-46149 · Security Note
• https://bdu.fstec.ru/vul/2025-13131 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-46149 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-46149 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-46149 · Vendor Advisory
• https://github.com/pytorch/pytorch/issues/147848 · Note
• https://t.me/cveNotify/137349 · Telegram Post
• https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a · Note
• https://twitter.com/CVEnew/status/1971226592430145658 · Twitter Post