Description
PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that, when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to arbitrary code execution. Version 2.10.0 fixes the issue.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
pytorch pytorch
< 2.10.0affected
References
- https://github.com/pytorch/pytorch/security/advisories/GHSA-63cw-57p8-fm3p ↗
- https://github.com/pytorch/pytorch/issues/163105 ↗
- https://github.com/pytorch/pytorch/163122/commit/954dc5183ee9205cbe79876ad05dd2d9ae752139 ↗
- https://github.com/pytorch/pytorch/releases/tag/v2.10.0 ↗
- https://access.redhat.com/security/cve/CVE-2026-24747 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2433612 ↗
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24747.json ↗
- https://access.redhat.com/errata/RHSA-2026:24977 ↗