Skip to content
Threat Feed
Subscribe

Vendor

PyTorch

4 briefs RSS
high advisory

CVE-2026-65918 - PyTorch Torchvision Out-of-Bounds Heap Read Vulnerability

An out-of-bounds heap read vulnerability (CVE-2026-65918) in PyTorch torchvision through version 0.28.0 allows attackers to supply malicious GIF files, leading to denial of service via segmentation fault or disclosure of adjacent heap memory contents.

torchvision denial-of-service information-disclosure library-vulnerability
3t 1c
high advisory

Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders

Stanza, an NLP library, is vulnerable to remote code execution (CVE-2026-54499) due to an unsafe fallback mechanism when loading PyTorch model files, allowing an attacker who can place a malicious pretrain or model file to achieve arbitrary code execution on systems processing NLP pipelines, leading to credential theft, backdoors, data exfiltration, and lateral movement.

Stanza +1 deserialization rce python pytorch machine-learning supply-chain cwe-502 nlp +1
2r 2t
high advisory

vllm and PyTorch Vulnerability Allows DoS and Potential Remote Code Execution

A remote, authenticated attacker can exploit a vulnerability in vllm and PyTorch to cause a denial-of-service condition or potentially achieve remote code execution.

vllm denial-of-service remote-code-execution PyTorch
2r 2t
medium advisory

First Time Python Accessed Sensitive Credential Files on macOS

This alert triggers on the first instance of a Python process accessing sensitive credential files on macOS, potentially indicating post-exploitation credential theft.

Python +1 credential-access macos endpoint
2r 1t