{"data":{"id":"d5218cd2-e985-42db-92db-2b99e35ca85b","title":"CVE-2026-65918: PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GI","summary":"PyTorch torchvision (a library for computer vision tasks) versions up to 0.28.0 contain an out-of-bounds heap read vulnerability (a bug where software reads memory it shouldn't access) in the GIF image decoder. Attackers can send malicious or broken GIF files to crash programs using this library or steal data from nearby memory.","solution":"Fixed in commit 4e05dc2. Users should update to a version of PyTorch torchvision that includes this commit (after version 0.28.0).","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-65918","publishedAt":"2026-07-23T18:17:02.143Z","cveId":"CVE-2026-65918","cweIds":["CWE-125"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["Meta"],"affectedVendorsRaw":["PyTorch","torchvision"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-07-23T18:17:02.143Z","capecIds":["CAPEC-540"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}