Denial of Service Vulnerability in PyTorch by Meta
CVE-2025-63396

3.3LOW

Key Information:

Vendor

Meta

Status
PyTorch
Vendor
CVE Published:
12 November 2025

What is CVE-2025-63396?

A vulnerability exists in PyTorch versions 2.5 and 2.7.1 due to the omission of the profiler.stop() function, which can lead to instability during the execution of torch.profiler.profile (PythonTracer). This issue can result in the application crashing or hanging while finalizing, creating a Denial of Service scenario.

References

https://github.com/Daisy2ang
http://pytorch.com
https://github.com/pytorch/pytorch

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.