CVE-2025-63396
Low · 3.3CVSS
3.3
EPSS
0.1%
Published
Nov 12, 2025
CISA due date
—
The record
An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Bitnami | pytorch | 2.5.0 | 2.5.1 |
Related vulnerabilities
- GHSA-63cw-57p8-fm3p PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files Also affects pytorch
- CVE-2026-24747 PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files Also affects pytorch
- CVE-2025-32434 PyTorch: `torch.load` with `weights_only=True` leads to remote code execution Also affects pytorch
- CVE-2025-3730 PyTorch Improper Resource Shutdown or Release vulnerability Also affects pytorch
- CVE-2025-2953 A vulnerability, which was classified as problematic, has been found in PyTorch… Also affects pytorch
- CVE-2024-48063 In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. Also affects pytorch
- CVE-2026-98123 In the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup… CWE-667
- CVE-2026-45404 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-667