CVE-2026-65918
HIGH
NVD
CVSS Score
7.1
Severity
HIGH
Published
Jul 23, 2026
Vendor
unknown
Description
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's read_from_tensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fault or disclose adjacent heap memory contents.