Bitwise Operation Vulnerability in PyTorch Affecting Output Accuracy

CVE-2025-46152

What is CVE-2025-46152?

In earlier versions of PyTorch prior to 2.7.0, a flaw exists in the bitwise_right_shift operation, which returns incorrect results when processing out-of-bounds values of the 'other' argument. This defect can lead to unexpected behaviors in applications utilizing PyTorch, potentially corrupting data and affecting overall system reliability. Developers are urged to upgrade to the latest version to mitigate these issues. For further details, refer to the official GitHub discussions and pull requests addressing the problem.

References