Vulnerability PYSEC-2025-209
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
1 year ago
September 25, 2025 at 04:15 PM UTC
No summary available
1.0.0 - 2.7.0
1.0.0 - 2.7.0
Details
An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Low Risk
3 months ago
PyTorch Improper Resource Shutdown or Release vulnerability
1.0.0 - 2.7.1 PYSEC-2026-1970
1.0.0 - 2.7.1 PYSEC-2026-1970
High Risk
7 months ago
No summary available
1.0.0 - 2.10.0 PYSEC-2026-139
1.0.0 - 2.10.0 PYSEC-2026-139
High Risk
9 months ago
No summary available
1.0.0 - 2.9.1 PYSEC-2026-2286
1.0.0 - 2.9.1 PYSEC-2026-2286
High Risk
9 months ago
PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files
1.0.0 - 2.9.1 GHSA-63cw-57p8-fm3p
1.0.0 - 2.9.1 GHSA-63cw-57p8-fm3p
Low Risk
11 months ago
No summary available
1.0.0 - 2.5.0 PYSEC-2025-210
1.0.0 - 2.5.0 PYSEC-2025-210
Impacted packages
Timeline
Published
1 year ago
September 25, 2025 at 04:15 PM UTC
Fixed (2.7.1)
1 year ago
June 04, 2025 at 05:38 PM UTC
Last Modified
5 months ago
May 20, 2026 at 09:19 AM UTC