Medium severity5.3NVD Advisory· Published Sep 25, 2025· Updated Jun 17, 2026

CVE-2025-46153

Description

PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pytorch/Pytorchllm-fuzzy2 versions
<3.7.0+ 1 more
- (no CPE)range: <3.7.0
- (no CPE)
Linux Foundation/Pytorch
cpe:2.3:a:linuxfoundation:pytorch:*:-:*:*:*:python:*:*
Range: >=2.6.0,<2.7.0
osv-coords
pkg:bitnami/pytorch
Range: >= 2.6.0, < 2.7.0

Patches

Vulnerability mechanics

References

github.com/pytorch/pytorch/pull/143460nvdIssue TrackingPatch
gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248anvdThird Party Advisory
gist.github.com/shaoyuyoung/e636f2e7a306105b7e96809e2b85c28anvdThird Party Advisory
github.com/pytorch/pytorch/compare/v2.6.0...v2.7.0nvdProduct
github.com/pytorch/pytorch/issues/142853nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000