CVE-2025-55552: Integer Overflow
pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randnlike are used together.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/pytorchto a version that resolves this vulnerability.Fixed in 2.12.0+dfsg2-1 - Upgrade
Upgrade
debian/pytorchto a version that resolves this vulnerability.Fixed in 2.14.1+dfsg-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55552?
CVE-2025-55552 is classified as a medium severity vulnerability due to its unexpected behavior in PyTorch.
How do I fix CVE-2025-55552?
To mitigate CVE-2025-55552, it is recommended to update to the latest version of PyTorch where the issue is addressed.
What components of PyTorch are affected by CVE-2025-55552?
CVE-2025-55552 affects the torch.rot90 and torch.randn_like components in PyTorch.
What kind of unexpected behavior is reported in CVE-2025-55552?
CVE-2025-55552 reports that using torch.rot90 and torch.randn_like together may produce unintended results.
Which version of PyTorch is affected by CVE-2025-55552?
CVE-2025-55552 specifically affects PyTorch version 2.8.0.