Skip to main content

Numeric Range Comparison Without Minimum Check in torch

CVE-2025-46148

  • torch
Severity Medium
Score 5.3/10

Summary

In PyTorch versions through 2.7.1, when eager is used, 'nn.PairwiseDistance(p=2)' produces incorrect results.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • LOW
  • NONE

CWE-839 - Numeric Range Comparison Without Minimum Check

The program checks a value to ensure that it is less than or equal to a maximum, but it does not also verify that the value is greater than or equal to the minimum.

Advisory Timeline

  • Published