BIT-pytorch-2025-46153

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/pytorch/BIT-pytorch-2025-46153.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-pytorch-2025-46153
Aliases
Published
2025-10-05T23:47:50.900Z
Modified
2025-10-06T07:14:31.627925Z
Summary
[none]
Details

PyTorch before 3.7.0 has a bernoullip decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallbackrandom=True.

Database specific 
{
    "severity": "Medium",
    "cpes": [
        "cpe:2.3:a:linuxfoundation:pytorch:*:*:*:*:*:python:*:*"
    ]
}
References

Affected packages

Bitnami / pytorch

Package

Name
pytorch
Purl
pkg:bitnami/pytorch

Severity

  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
2.6.0
Fixed
2.7.0

Database specific

source 
"https://github.com/bitnami/vulndb/tree/main/data/pytorch/BIT-pytorch-2025-46153.json"