Get real-time updates on Telegram
CVE-2026-65918: torchvision through 0.28.0 (inclusive); +1 more affected products
CVE-2026-65918. CVSS 3.1 base score 7.1 (HIGH, Vendor/CNA). EPSS 0.00445 (percentile 0.37632), scored 22-Oct-2026.
Affected technology
torchvision · through 0.28.0 (inclusive)
linuxfoundation
vision · 0 through 0.28.0
pytorch
Description’s affected range: through 0.28.0, fixed in commit 4e05dc2,
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · Passive user interaction
What an attacker can do
Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fault or disclose adjacent heap memory contents. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality impact as low; integrity impact as none; availability impact as high.
- CWE
- CWE-125
- CCR priority
- 28.5 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H · Vendor/CNA
- EPSS
- 0.00445 · percentile 0.37696 · 2026-10-24
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-24 15:09:16.138216+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-24 15:07:27.951960+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-65918.html