Dashboard / CVE-2025-63396

CVE-2025-63396

LOW
INFO Priority: 0.00 BB Relevance: 32/100
Published: 2025-11-12 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: Low

Description

An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS).

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
linuxfoundation pytorch 2.5.0
linuxfoundation pytorch 2.7.1

References & Advisories (3)

Bug Bounty Relevance

32 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

3.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS — Exploitation Probability

0.13%
Raw Score 0.001330
Percentile 2.8%
Date 2026-11-09

EPSS Trend

2026-11-09
0.00133
2026-11-08
0.00133
2026-11-07
0.00133
2026-11-06
0.00133
2026-11-05
0.00133

Intelligence Sources

nvd ref →

External Links