Denial of Service Vulnerability in PyTorch by Meta
CVE-2025-55560
7.5HIGH
What is CVE-2025-55560?
A vulnerability in PyTorch version 2.7.0 can potentially lead to a Denial of Service (DoS) attack. This issue arises when models utilize the torch.Tensor.to_sparse() and torch.Tensor.to_dense() functions while being compiled by Inductor. The misuse of these tensor methods can cause significant performance degradation, resulting in service unavailability. It is crucial for developers using this version of PyTorch to be aware of this flaw and take necessary precautions to mitigate the associated risks.