CVE-2025-46152: Medium severity PyTorch PyTorch vulnerability
Published Sep 25, 2025
·Updated
In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the "other" argument.
Affected Software
5 affected componentsFixes available
PyTorch PyTorch<2.7.0
linuxfoundation Pytorch Python>=2.6.0<2.7.0
Microsoft cbl2 pytorch 2.0.0-9
Microsoft azl3 pytorch 2.2.2-7
Microsoft azl3 pytorch 2.2.2-9
Remediation
Patch Available
Event History
Sep 25, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 29, 2025
Data Sourced
via Microsoft·01:01 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·01:01 AM
Affected Software
Updated
via Microsoft·01:01 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-46152?
CVE-2025-46152 has a severity rating of medium due to potential incorrect outputs from bitwise operations.
2
How do I fix CVE-2025-46152?
To fix CVE-2025-46152, upgrade your PyTorch version to 2.7.0 or later, where the issue is resolved.
3
What versions of PyTorch are affected by CVE-2025-46152?
CVE-2025-46152 affects all versions of PyTorch before 2.7.0.
4
What is the nature of the issue in CVE-2025-46152?
The issue in CVE-2025-46152 involves the bitwise_right_shift function producing incorrect output for certain out-of-bounds values.
5
Is CVE-2025-46152 a critical vulnerability?
CVE-2025-46152 is not classified as critical, but it can lead to incorrect calculations that may affect applications relying on PyTorch.