CVE-2025-55560: High severity PyTorch PyTorch vulnerability
An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.tosparse() and torch.Tensor.todense() and is compiled by Inductor.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55560?
CVE-2025-55560 is classified as a Denial of Service (DoS) vulnerability due to improper handling of certain tensor operations.
How do I fix CVE-2025-55560?
To mitigate CVE-2025-55560, upgrade to the latest version of PyTorch where the vulnerability has been addressed.
What versions of PyTorch are affected by CVE-2025-55560?
CVE-2025-55560 affects PyTorch version 2.7.0 specifically.
What causes the Denial of Service in CVE-2025-55560?
The Denial of Service in CVE-2025-55560 is caused by a model that switches between torch.Tensor.to_sparse() and torch.Tensor.to_dense() when compiled by Inductor.
Are there any known exploits for CVE-2025-55560?
Currently, there are no public exploits reported for CVE-2025-55560, but it remains a significant concern for users of the affected software.