CVE-2025-2953: PyTorch denial of service in torch.mkldnn_max_pool2d function

Summary

A vulnerability classified as problematic (CVE-2025-2953) affects the function torch.mkldnn_max_pool2d in PyTorch 2.6.0+cu124. Manipulation of this function leads to denial of service, and an attack has to be approached locally. The exploit has been publicly disclosed, but the real existence of the vulnerability is still doubted, and NVD has not yet provided an assessment; VulDB rates it CVSS 4.0 4.8 MEDIUM.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• torchPyPINo LLM dependency detected · 200 tracked dependents

Related items

• LowCloakFEM: Agentic FEM Code Generation for Red-Teaming Computational Resource ExhaustionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumThe Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model ResourcesSimilar attack · Google Threat Intelligence
• InfoThe Blind Spots of Detection: Adversarial Perturbation Attacks against Watchdogs in Distributed LLM InferenceSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• HighCVE-2026-118761: Kubeflow Pipelines decompression bomb in pipeline archive uploadSimilar attack · NVD/CVE Database
• LowOpenCode User Hit with Hostile Backlash After Reporting Free AI LoopholeSimilar attack · Socket Blog