pytorch: Deserialization of Untrusted Data in pytorch/pytorch
Published Mar 20, 2025
No CVSS score
EPSS 0.50%
Description
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected products
No data.
No data.
No data.
OpenShift Lightspeed
openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-amd-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-aws-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-azure-amd-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-azure-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-gcp-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-ibm-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-intel-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/docling-serve-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/instructlab-amd-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/instructlab-intel-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/instructlab-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/ui-rhel9
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-ml-pipelines-api-server-v2-rhel8
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-ml-pipelines-driver-rhel8
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-ml-pipelines-launcher-rhel8
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-ml-pipelines-persistenceagent-v2-rhel8
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel8
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| OpenShift Lightspeed | openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-amd-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-aws-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-azure-amd-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-azure-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-gcp-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-ibm-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-intel-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/docling-serve-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/instructlab-amd-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/instructlab-intel-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/instructlab-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/ui-rhel9 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-ml-pipelines-api-server-v2-rhel8 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-ml-pipelines-driver-rhel8 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-ml-pipelines-launcher-rhel8 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-ml-pipelines-persistenceagent-v2-rhel8 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel8 | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
This CVE has been rejected because it describes known functionality of PyTorch.
Red Hat mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
References (6)
- https://access.redhat.com/security/cve/CVE-2024-7804 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2353598 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-6954 Advisory
- https://huntr.com/bounties/0e870eeb-f924-4054-8fac-d926b1fb7259
- https://nvd.nist.gov/vuln/detail/CVE-2024-7804
- https://www.cve.org/CVERecord?id=CVE-2024-7804
Change history (0)
No recorded changes yet.