cve.bz

CVE-2025-63396

3.3 lowEPSS 0.1%

Low (3.3) in linuxfoundation pytorch. EPSS 0.1% chance of exploitation in the next 30 days.

An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS).

Severity

CVSS 3.1

3.3 low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
EPSS
0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE
CWE-667
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
PYSEC-2025-210PyPItorch<=2.5.0-NA
<=2.7.1-NA
no fix published

References

Check your stackJSON