-
-
Save shaoyuyoung/65a587a579dfdff887b9b35bb79b9093 to your computer and use it in GitHub Desktop.
CVE-2025-46148
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [CVE ID] | |
| CVE-2025-46148 | |
| [Description] | |
| torch.nn.PairwiseDistance outputs incorrect results via torch.compile, allowing attackers to make dangerous decisions by leveraging this vulnerability. | |
| [Additional Information] | |
| This vulnerability is labeled as high priority by pytorch community | |
| [VulnerabilityType Other] | |
| Incorrect Calculation | |
| [Vendor of Product] | |
| https://github.com/pytorch/pytorch | |
| [Affected Product Code Base] | |
| pytorch - <=2.7.0 | |
| [Affected Component] | |
| torch inductor (a deep learning compiler of pytorch): https://github.com/pytorch/pytorch/tree/main/torch/_inductor | |
| [Attack Type] | |
| Remote | |
| [CVE Impact Other] | |
| Deep Learning model outputs incorrect results, making dangerous decisions | |
| [Attack Vectors] | |
| The hacker requested to compile the pytorch model using inductor, resulting in incorrect output results | |
| [Reference] | |
| https://github.com/pytorch/pytorch/issues/151198 | |
| https://github.com/pytorch/pytorch/pull/152993 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment