Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's read_from_tensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fault or disclose adjacent heap memory contents.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-65918 Out-of-Bounds Heap Read in PyTorch Torchvision GIF Decoder Through 0.28.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-65918
Post summary
The post announces CVE-2026-65918, describing an out‑of‑bounds heap read in the PyTorch Torchvision GIF decoder up to version 0.28.0, without providing PoC, exploit, patch, or exploitation status.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | linuxfoundation | torchvision | - | python | - |