VYPR
← All advisories
Low severity3.3OSV Advisory· Published May 5, 2025· Updated Apr 15, 2026

CVE-2025-4287

CVE-2025-4287

Description

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function torch.cuda.nccl.reduce of the file torch/cuda/nccl.py. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The patch is identified as 5827d2061dcb4acd05ac5f8e65d8693a481ba0f5. It is recommended to apply a patch to fix this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Divigroup Rap/PytorchOSV
    Range: bc2caa7fdf006894eff7af936babde69ab5a40f8-huydhn-debug, ciflow/inductor/3b9a386, ciflow/inductor/3d4b92b, …
  • Pytorch/Pytorchllm-fuzzy
    Range: =2.6.0+cu124

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.