Buffer Overflow resolution

torch.package / torch::deploy
1

I saw that 2.7.0 had a Buffer Overflow vulnerability outlined here https://www.cvedetails.com/cve/CVE-2025-55558/. Upgraded to 2.9.0 but vulnerability wasn’t fixed. Wondering if this would be resolved soon?

2

Is the CVE not already fixed via this and this PR as linked in the CVE description?

3

Apologies for the late reply back, I was mistaken, the new Buffer Overflow was pertaining to the pad_packed_sequence function for RNNs outlined here. This seems to not have been resolved at this time.

4

The CVE is reported as medium in the NVD so I would not expect a high priority.

CC @malfet for security issues.