CVE-2026-65918 | PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2,… | CVSS 7.1 HIGH

Description

PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's read_from_tensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fault or disclose adjacent heap memory contents.

Metadata

CVE ID: CVE-2026-65918
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-07-23 12:51 UTC
Published: 2026-07-23 17:36 UTC
Last updated: 2026-07-23 18:12 UTC
Primary CWE: CWE-125
Out-of-bounds Read
Vendor / Product: pytorch / vision
Sources: cve.org · NVD

Severity & Metrics

7.1 HIGH CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: no
Tech. Impact: partial

Affected products (1)

Vendor	Product	Platform	Versions
pytorch	vision	—	0 ≤ 0.28.0, 4e05dc22f5f050a9528cc0ea09ceca6cdaf8f4ed

Weakness (CWE)

CWE	Source	Description
CWE-125	cna	Out-of-bounds Read

CVSS scores (2)

Score	Severity	Version	Source	Vector
7.1	HIGH	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
7.1	HIGH	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

References (4)

Researcher Disclosure https://github.com/pytorch/vision/issues/9551
Pull Request https://github.com/pytorch/vision/pull/9520
Patch Commit https://github.com/pytorch/vision/commit/4e05dc22f5f050a9528cc0ea09ceca6cdaf8f4ed
https://www.vulncheck.com/advisories/pytorch-torchvision-gif-decoder-out-of-bounds-heap-read