Most recent entries from all

certfr-2025-avi-0538 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Elles permettent à un attaquant de provoquer un prob…

2026-10-05T12:05:24.477316+00:00

certfr-2025-avi-0538

fkie_cve-2024-7804

2026-10-05T12:05:24.477359+00:00

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Withdrawn: GHSA-4vmg-rw8f-92f9 — Withdrawn Advisory: PyTorch deserialization vulnerability

2026-10-05T12:05:24.477390+00:00

Withdrawn by the publisher.

Affected: PyPI: torch

## Withdrawn Advisory This advisory has been withdrawn because it describes known functionality of PyTorch. This link is maintained to preserve external references.

## Original Description A deserialization vulnerability exists in the Pytorch RPC framework (torch.distributed.rpc) in pytorch/pytorch versions <=2.3.1. The vulnerability arises from the lack of security verification during the deserialization process of PythonUDF objects in pytorch/torch/distributed/rpc/internal.py. This flaw allows an attacker to execute arbitrary code remotely by sending a malicious serialized PythonUDF object, leading to remote code execution (RCE) on the master node.

msrc_CVE-2024-7804 — Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2026-10-05T12:05:24.477420+00:00

msrc_CVE-2024-7804

Withdrawn: UBUNTU-CVE-2024-7804

2026-10-05T12:05:24.477436+00:00

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: pytorch, Ubuntu:24.10: pytorch

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

WID-SEC-W-2025-0623 — PyTorch: Mehrere Schwachstellen

2026-10-05T12:05:24.477478+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PyTorch ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen preiszugeben, beliebigen Code auszuführen und einen Denial-of-Service-Zustand zu verursachen.