CVE-2025-46149: Medium severity PyTorch PyTorch vulnerability
In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/pytorchto a version that resolves this vulnerability.Fixed in 2.12.0+dfsg2-1 - Upgrade
Upgrade
debian/pytorchto a version that resolves this vulnerability.Fixed in 2.14.1+dfsg-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-46149?
CVE-2025-46149 has a severity level classified as medium due to the potential for assertion errors affecting functionality.
How do I fix CVE-2025-46149?
To mitigate CVE-2025-46149, upgrade PyTorch to version 2.7.0 or later where the issue has been resolved.
What products are affected by CVE-2025-46149?
CVE-2025-46149 affects all versions of PyTorch prior to 2.7.0.
What component does CVE-2025-46149 impact within PyTorch?
CVE-2025-46149 specifically impacts the nn.Fold component when using the inductor.
Is there a workaround for CVE-2025-46149 if I cannot upgrade?
There is no known effective workaround for CVE-2025-46149 other than upgrading to a secure version.