CVE-2025-46150: Medium severity PyTorch PyTorch vulnerability
In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/pytorchto a version that resolves this vulnerability.Fixed in 2.12.0+dfsg2-1 - Upgrade
Upgrade
debian/pytorchto a version that resolves this vulnerability.Fixed in 2.14.1+dfsg-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-46150?
The severity of CVE-2025-46150 is considered moderate due to inconsistent results in the FractionalMaxPool2d function.
How do I fix CVE-2025-46150?
To fix CVE-2025-46150, upgrade PyTorch to version 2.7.0 or later.
What is impacted by CVE-2025-46150?
CVE-2025-46150 specifically impacts PyTorch versions prior to 2.7.0 when using the torch.compile feature.
What vulnerabilities are related to CVE-2025-46150?
CVE-2025-46150 is related to issues that arise from inconsistent behavior in CUDA operations in PyTorch.
Is CVE-2025-46150 exploitable?
CVE-2025-46150 may lead to incorrect outputs, potentially impacting model performance but does not present a direct security exploit.