pytorch

Products

ProductCVEsExploitedLatest
serve4–Jul 18, 2024
pytorch2–Jan 27, 2026
pytorch/serve1–Mar 20, 2025
vision1–Jul 23, 2026

Exploited and recent CVEs

  • CVE-2026-65918 High 7.1 PyTorch torchvision GIF Decoder Out-of-bounds Heap Read 0.4%
  • CVE-2026-24747 High 8.8 PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files 0.8%
  • CVE-2025-32434 Critical 9.3 PyTorch: `torch.load` with `weights_only=True` leads to remote code execution 2.4%
  • CVE-2024-6577 Medium 6.3 Unclaimed S3 Bucket Usage in pytorch/serve 0.4%
  • CVE-2024-35198 Critical 9.8 TorchServe bypass allowed_urls configuration 0.8%
  • CVE-2024-35199 High 8.2 TorchServe gRPC Port Exposure 0.6%
  • CVE-2023-48299 Medium 5.3 TorchServe ZipSlip 0.7%
  • CVE-2023-43654 Critical 10.0 TorchServe Server-Side Request Forgery 42.5%