PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's read_from_tensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fault or disclose adjacent heap memory contents.
Fix
Patch, vendor advisory and mitigation references on NVD 3
- https://github.com/pytorch/vision/commit/4e05dc22f5f050a9528cc0ea09ceca6cdaf8f4ed Patch
- https://github.com/pytorch/vision/pull/9520 Issue Tracking, Patch
- https://www.vulncheck.com/advisories/pytorch-torchvision-gif-decoder-out-of-bounds-heap-read Exploit, Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.1 · linuxfoundationNVD modified 2026-10-24 13:10
Affected (CPE criteria) 1
cpe:2.3:a:linuxfoundation:torchvision:*:*:*:*:*:python:*:*
References 4
- https://github.com/pytorch/vision/commit/4e05dc22f5f050a9528cc0ea09ceca6cdaf8f4ed Patch
- https://github.com/pytorch/vision/issues/9551 Exploit, Issue Tracking
- https://github.com/pytorch/vision/pull/9520 Issue Tracking, Patch
- https://www.vulncheck.com/advisories/pytorch-torchvision-gif-decoder-out-of-bounds-heap-read Exploit, Patch, Third Party Advisory