High severity7.5NVD Advisory· Published Sep 25, 2025· Updated Jun 17, 2026

CVE-2025-55558

Description

A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a Denial of Service (DoS).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pytorch/Pytorchllm-fuzzy2 versions
<2.7.0+ 1 more
- (no CPE)range: <2.7.0
- (no CPE)
osv-coords
pkg:bitnami/pytorch
Range: < 2.7.1
Linux Foundation/Pytorch
cpe:2.3:a:linuxfoundation:pytorch:*:*:*:*:*:python:*:*
Range: <=2.7.0

Patches

Vulnerability mechanics

References

github.com/pytorch/pytorch/pull/151887nvdIssue TrackingPatch
gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efcnvdThird Party Advisory
github.com/pytorch/pytorch/issues/151523nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000