PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

🗓️ 22 Apr 2024 07:00:00Reported by MicrosoftType

PyTorch before two point two point zero has a heap buffer overflow in runtime/vararg_functions.cpp enabling a Denial of Service via crafted input.

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a a denial of service in PyTorch [CVE-2024-31580]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Watson Machine Learning on Cloud Pak for Data is affected by torch(Publicly disclosed vulnerability (CVE-2024-31583, CVE-2024-31580)	2 Sep 202615:17	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo Application Suite - torch-1.13.1-cp37-cp37m-manylinux1_x86_64.whl is vulnerable to multiple security CVEs used in IBM Maximo Application Suite - Monitor Component	25 Jun 202422:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service [CVE-2024-31580] [CVE-2024-31583]	31 Jul 202413:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in PyTorch [CVE-2024-31580]	28 Jan 202522:08	–	ibm
BDU FSTEC	The vulnerability of the /runtime/vararg_functions.cpp component of the PyTorch machine learning framework, which allows a hacker to cause a service failure.	24 Sep 202400:00	–	bdu_fstec
CBLMariner	CVE-2024-31580 affecting package pytorch for versions less than 2.0.0-4	30 Apr 202401:31	–	cbl_mariner
Circl	CVE-2024-31580	29 Mar 202500:28	–	circl
CNNVD	PyTorch 安全漏洞	17 Apr 202400:00	–	cnnvd
CVE	CVE-2024-31580	17 Apr 202400:00	–	cve