BIT-PYTORCH-2022-45907

🗓️ 06 Mar 2024 11:02:51Reported by GoogleType

osv_bit🔗 osv.dev👁 58 Views

PyTorch vulnerability in parse_type_line before trunk/89695 allows arbitrary code executio

Reporter	Title	Published	Views	Family All 34
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	8 Mar 202319:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance may be vulnerable to arbitrary code execution due to [CVE-2022-45907]	10 Feb 202309:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data Are Addressed	8 Dec 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to an arbitrary code execution in PyTorch [CVE-2022-45907]	28 Jun 202319:47	–	ibm
IBM Security Bulletins	Security Bulletin: PyTorch vulnerability affects IBM Watson Machine Learning in Cloud Pak for Data [CVE-2022-45907]	3 Jan 202406:58	–	ibm
IBM Security Bulletins	Security Bulletin: PyTorch is vulnerable to CVE-2022-45907 used in IBM Maximo Application Suite - Monitor Component	17 May 202319:00	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties in Open Source packages affecting IBM Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:35	–	ibm
BDU FSTEC	PyTorch JIT Annotations Code Execution	11 Sep 202400:00	–	bdu_fstec
Circl	CVE-2022-45907	26 Nov 202207:15	–	circl
CNNVD	PyTorch 代码注入漏洞	26 Nov 202200:00	–	cnnvd

Source	Link
github	www.github.com/pytorch/pytorch/commit/767f6aa49fe20a2766b9843d01e3b7f7793df6a3
github	www.github.com/pytorch/pytorch/issues/88868
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-45907

08 Sep 2026 08:48Current

9.6Critical risk

Vulners AI Score9.6

CVSS 3.19.8

EPSS0.0129

SSVC

pytorch vulnerability parse_type_line trunk/89695 arbitrary code execution