Vulnerability PYSEC-2026-1970
Low Risk
LOW RISK
CVSS Score: 3.3
Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
3 months ago
July 07, 2026 at 04:02 PM UTC
PyTorch Improper Resource Shutdown or Release vulnerability
1.0.0 - 2.7.1
1.0.0 - 2.7.1
Summary
PyTorch Improper Resource Shutdown or Release vulnerability
Details
A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Affected is the function torch.nn.functional.ctc_loss of the file aten/src/ATen/native/LossCTC.cpp. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is 46fc5d8e360127361211cb237d5f9eef0223e567. It is recommended to apply a patch to fix this issue.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
7 months ago
No summary available
1.0.0 - 2.10.0 PYSEC-2026-139
1.0.0 - 2.10.0 PYSEC-2026-139
High Risk
9 months ago
No summary available
1.0.0 - 2.9.1 PYSEC-2026-2286
1.0.0 - 2.9.1 PYSEC-2026-2286
High Risk
9 months ago
PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files
1.0.0 - 2.9.1 GHSA-63cw-57p8-fm3p
1.0.0 - 2.9.1 GHSA-63cw-57p8-fm3p
Low Risk
11 months ago
No summary available
1.0.0 - 2.5.0 PYSEC-2025-210
1.0.0 - 2.5.0 PYSEC-2025-210
High Risk
1 year ago
No summary available
1.0.0 - 2.7.0 PYSEC-2025-209
1.0.0 - 2.7.0 PYSEC-2025-209
Impacted packages
Timeline
Published
3 months ago
July 07, 2026 at 04:02 PM UTC
Fixed (2.8.0)
1 year ago
August 06, 2025 at 02:54 PM UTC
Last Modified
3 months ago
July 07, 2026 at 05:56 PM UTC