עברית

Vulnerability Intelligence

CVE-2025-63396

Low 3.3

Published
Last modified
NVD status
Modified

Description

An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS).

Affected products

linuxfoundation: pytorch

References3

Metrics

CVSS 3.1
3.3 LOW Score source: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
EPSS — exploit probability
0% percentile: 3 · as of 10 November 2026
CWE
CWE-667

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.