PT-2025-39382 · Pytorch+1 · Pytorch+1

Published 2024-12-19 · Updated 2025-10-05 · CVE-2025-46152

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions PyTorch versions prior to 2.7.0

Description The bitwise right shift function in PyTorch produces incorrect output when the other argument has certain out-of-bounds values. This issue affects versions prior to 2.7.0.

Recommendations Update to PyTorch version 2.7.0 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

AZL-67884

BDU:2025-13132

BIT-PYTORCH-2025-46152

CVE-2025-46152

PYSEC-2025-201

Affected Products

Debian

Pytorch

References · 16

• https://github.com/pytorch/pytorch/pull/143635 · Patch
• https://security-tracker.debian.org/tracker/CVE-2025-46152 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-67884 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46152 · Security Note
• https://bdu.fstec.ru/vul/2025-13132 · Security Note
• https://osv.dev/vulnerability/PYSEC-2025-201 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-46152 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-46152 · Security Note
• https://osv.dev/vulnerability/BIT-pytorch-2025-46152 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-46152 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-46152 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-46152 · Vendor Advisory
• https://github.com/pytorch/pytorch/issues/143555 · Note
• https://twitter.com/VulmonFeeds/status/1971320194430644410 · Twitter Post
• https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a · Note