关键信息 CVE ID: CVE-2025-46153 Description: - An issue in PyTorch v2.6.0 and fixed in v2.7.0 allows a remote attacker to execute arbitrary code via the torch.nn.Dropout1d, torch.nn.Dropout2d, and torch.nn.Dropout3d APIs. Additional Information: - Developers in the PyTorch community have confirmed this vulnerability and fixed it (https://github.com/pytorch/pytorch/pull/143460) Vulnerability Type: Incorrect Calculation Vendor of Product: https://github.com/pytorch/pytorch Affected Product Code Base: PyTorch - Affected in v2.6.0. Fixed in v2.7.0 Affected Component: PyTorch APIs: torch.nn.Dropout1d, torch.nn.Dropout2d, and torch.nn.Dropout3d Attack Type: Remote Attack Vectors: Attackers request users to compile the PyTorch model. will output incorrect results after using torch.compile. Reference: - https://github.com/pytorch/pytorch/issues/142853 - https://github.com/pytorch/pytorch/pull/143460