Bitwise Operation Vulnerability in PyTorch Affecting Output Accuracy
CVE-2025-46152

5.3MEDIUM

Key Information:

Vendor

PyTorch

Status
PyTorch
Vendor
CVE Published:
25 September 2025

What is CVE-2025-46152?

In earlier versions of PyTorch prior to 2.7.0, a flaw exists in the bitwise_right_shift operation, which returns incorrect results when processing out-of-bounds values of the 'other' argument. This defect can lead to unexpected behaviors in applications utilizing PyTorch, potentially corrupting data and affecting overall system reliability. Developers are urged to upgrade to the latest version to mitigate these issues. For further details, refer to the official GitHub discussions and pull requests addressing the problem.

References

https://github.com/pytorch/pytorch/issues/143555
https://github.com/pytorch/pytorch/pull/143635
https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.