CVE-2025-2953
PyTorch torch.mkldnn_max_pool2d denial of service
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
PyTorch torch.mkldnn_max_pool2d denial of service
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The security policy of the project warns to use unknown models which might establish malicious effects.
Eine problematische Schwachstelle wurde in PyTorch 2.6.0+cu124 entdeckt. Es geht hierbei um die Funktion torch.mkldnn_max_pool2d. Dank Manipulation mit unbekannten Daten kann eine denial of service-Schwachstelle ausgenutzt werden. Der Angriff muss lokal passieren. Der Exploit steht zur öffentlichen Verfügung. Bisher konnte die Existenz der vermeintlichen Schwachstelle noch nicht eindeutig nachgewiesen werden.
| 2025-03-29: | Advisory disclosed |
| 2025-03-29: | VulDB entry created |
| 2025-04-22: | VulDB entry last update |
Default436352 (VulDB User)
vuldb.com/?id.302006 (VDB-302006 | PyTorch torch.mkldnn_max_pool2d denial of service)
vuldb.com/?ctiid.302006 (VDB-302006 | CTI Indicators (IOB, IOC, IOA))
vuldb.com/?submit.521279 (Submit #521279 | pytorch PyTorch version: 2.6.0+cu124 Floating point exception)
github.com/pytorch/pytorch/issues/149274
github.com/pytorch/pytorch/issues/149274
github.com/pytorch/pytorch/blob/main/SECURITY.md
Support options
