PT-2025-39383 · Pytorch+1 · Pytorch+1

Published 2024-12-11 · Updated 2025-10-05 · CVE-2025-46153

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PyTorch versions prior to 3.7.0

Description The software contains an inconsistency in the bernoulli p decompose function within decompositions.py. This function does not fully align with the eager CPU implementation, which impacts the functionality of nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d when fallback random is set to True.

Recommendations Update to version 3.7.0 or later.

Fix

Weakness Enumeration

CWE-1176

Related Identifiers

BDU:2025-13134

BIT-PYTORCH-2025-46153

CVE-2025-46153

PYSEC-2025-202

Affected Products

Debian

Pytorch

References · 16

• https://github.com/pytorch/pytorch/pull/143460 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-46153 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-46153 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-46153 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-pytorch-2025-46153 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-46153 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46153 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-46153 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13134 · Security Note
• https://osv.dev/vulnerability/PYSEC-2025-202 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-46153 · Vendor Advisory
• https://github.com/pytorch/pytorch/compare/v2.6.0...v2.7.0 · Note
• https://github.com/pytorch/pytorch/issues/142853 · Note
• https://gist.github.com/shaoyuyoung/e636f2e7a306105b7e96809e2b85c28a · Note
• https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a · Note