Sign In

CVE-2025-63396

ADVISORY - nist

Summary

An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS).

EPSS Score⁠: 0.0003 (0.086)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-667⁠

Improper Locking

ADVISORY - redhat

CWE-772⁠

Missing Release of Resource after Effective Lifetime

Impacted images

Advisories

NIST

CREATED

UPDATED

ADVISORY IDCVE-2025-63396⁠
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
COMMON WEAKNESS ENUMERATION (CWE)
CWE-667⁠

CVSS SCORE

3.3low

Debian

CREATED

UPDATED

ADVISORY IDCVE-2025-63396⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

UPDATED

ADVISORY IDCVE-2025-63396⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

PypA

CREATED

UPDATED

ADVISORY ID

PYSEC-2025-210

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

3.3low

Bitnami

CREATED

UPDATED

ADVISORY ID

BIT-pytorch-2025-63396

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

3.3low

Red Hat

CREATED

UPDATED

ADVISORY IDCVE-2025-63396⁠
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CWE-772⁠

CVSS SCORE

3.3low