Nixpkgs security tracker

Login with GitHub

Details of issue NIXPKGS-2026-2265

NIXPKGS-2026-2265
published 5 hours ago
PyTorch torchvision GIF Decoder Out-of-bounds Heap Read
Permalink CVE-2026-65918
7.1 HIGH
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Passive (P)
  • Vulnerable System Impact Confidentiality (VC): Low (L)
  • Vulnerable System Impact Integrity (VI): None (N)
  • Vulnerable System Impact Availability (VA): High (H)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): None (N)
  • Subsequent System Impact Availability (SA): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Passive (P)
  • Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
  • Modified Vulnerable System Impact Integrity (MVI): None (N)
  • Modified Vulnerable System Impact Availability (MVA): High (H)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Negligible (N)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
  • Exploit Maturity (E): Not Defined (X)
updated 5 hours ago by @LeSuisse Activity log
  • Created suggestion 20 hours ago
  • @LeSuisse ignored
    47 packages
    • television
    • autorevision
    • photonvision
    • kanidm-provision
    • influxdb2-provision
    • elmPackages.elm-test
    • rocmPackages.mivisionx
    • simple-revision-control
    • thin-provisioning-tools
    • gnomeExtensions.my-vision
    • python313Packages.visions
    • python314Packages.visions
    • rocmPackages.mivisionx-cpu
    • rocmPackages.mivisionx-hip
    • python313Packages.hikvision
    • python314Packages.hikvision
    • haskellPackages.gogol-vision
    • haskellPackages.vcs-revision
    • python313Packages.cleanvision
    • python313Packages.supervision
    • python314Packages.cleanvision
    • python314Packages.supervision
    • kanidmWithSecretProvisioning_1_8
    • kanidmWithSecretProvisioning_1_9
    • kanidmWithSecretProvisioning_1_10
    • python313Packages.visionpluspython
    • python314Packages.visionpluspython
    • pkgsRocm.python3Packages.cleanvision
    • pkgsRocm.python3Packages.torchvision
    • python313Packages.google-cloud-vision
    • python314Packages.google-cloud-vision
    • haskellPackages.amazonka-lookoutvision
    • python313Packages.mypy-boto3-lookoutvision
    • python314Packages.mypy-boto3-lookoutvision
    • python313Packages.aliyun-python-sdk-ivision
    • python314Packages.aliyun-python-sdk-ivision
    • haskellPackages.gogol-androiddeviceprovisioning
    • python313Packages.azure-ai-vision-imageanalysis
    • python314Packages.azure-ai-vision-imageanalysis
    • python313Packages.aliyun-python-sdk-threedvision
    • python314Packages.aliyun-python-sdk-threedvision
    • python313Packages.types-aiobotocore-lookoutvision
    • python314Packages.types-aiobotocore-lookoutvision
    • python313Packages.azure-mgmt-iothubprovisioningservices
    • python314Packages.azure-mgmt-iothubprovisioningservices
    • python313Packages.mkdocs-git-revision-date-localized-plugin
    • python314Packages.mkdocs-git-revision-date-localized-plugin
    5 hours ago
  • @LeSuisse restored package pkgsRocm.python3Packages.torchvision 5 hours ago
  • @LeSuisse accepted 5 hours ago
  • @LeSuisse published on GitHub 5 hours ago
PyTorch torchvision GIF Decoder Out-of-bounds Heap Read

PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's read_from_tensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fault or disclose adjacent heap memory contents.

References

Affected products

vision
  • =<0.28.0
  • ==4e05dc22f5f050a9528cc0ea09ceca6cdaf8f4ed

Matching in nixpkgs

Ignored packages (46)

pkgs.autorevision

Extracts revision metadata from your VCS repository

  • nixos-unstable 1.22
    • nixpkgs-unstable 1.22
    • nixos-unstable-small 1.22
  • nixos-26.05 1.22
    • nixos-26.05-small 1.22
    • nixpkgs-26.05-darwin 1.22

pkgs.rocmPackages.mivisionx

Set of comprehensive computer vision and machine intelligence libraries, utilities, and applications

pkgs.gnomeExtensions.my-vision

MyVision is a fork of Display Configuration Switcher that has been thoughtfully and substantially enhanced. It allows users to store profiles that are directly bound to specific display devices. This approach eliminates the need for redundant profiles in scenarios where video outputs are detected or ordered unpredictably.

  • nixos-unstable 12
    • nixpkgs-unstable 12
    • nixos-unstable-small 12
  • nixos-26.05 12
    • nixos-26.05-small 12
    • nixpkgs-26.05-darwin 12

Package maintainers