{"data":{"id":"1f306eba-acd9-4ed1-a02e-08889059eb06","title":"CVE-2025-2953: A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is…","summary":"A vulnerability classified as problematic (CVE-2025-2953) affects the function torch.mkldnn_max_pool2d in PyTorch 2.6.0+cu124. Manipulation of this function leads to denial of service, and an attack has to be approached locally. The exploit has been publicly disclosed, but the real existence of the vulnerability is still doubted, and NVD has not yet provided an assessment; VulDB rates it CVSS 4.0 4.8 MEDIUM.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-2953","publishedAt":"2025-03-30T20:15:14.380Z","cveId":"CVE-2025-2953","cweIds":["CWE-404"],"cvssScore":"3.3","cvssSeverity":"low","severity":"low","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["torch@< 2.7.1-rc1 (fixed: 2.7.1-rc1)"],"affectedPackageNames":["torch"],"affectedPackageRefs":["pypi:torch"],"affectedVendors":[],"affectedVendorsRaw":["PyTorch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"PyTorch denial of service in torch.mkldnn_max_pool2d function","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00261,"epssCheckedAt":"2026-11-04T18:09:14.876Z","kevDateAdded":null,"advisoryAliases":["GHSA-3749-ghw9-m3mg"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:54:05.634Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":"2026-10-29T21:44:50.015Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"torch","fixedVersion":"2.7.1-rc1","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":"ecosystem","source":"tracked","status":"version_not_found","checkedAt":"2026-10-29T21:44:49.865Z"}]}}