Lucene search
K

1098 matches found

OSV
OSV
added 2026/01/29 8:50 a.m.3 views

BIT-PYTORCH-2026-24747 PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...

8.8CVSS6.1AI score0.00065EPSS
Exploits1References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/28 4:28 p.m.4 views

Malicious code in pytorch-mutex (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4959fc9ffb04b2e53d068fa3e6564a21dd3bd4b6374324416a643c3e58ebe330 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

6AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/28 12:20 p.m.2 views

CVE-2026-24747

A flaw was found in PyTorch, a Python package for tensor computation. A remote attacker could craft a malicious checkpoint file, which, when loaded using the weightsonly unpickler, could lead to memory corruption. This vulnerability may enable an attacker to achieve arbitrary code execution on th...

8.8CVSS6.3AI score0.00065EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2026/01/28 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-24747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to...

8.8CVSS6.4AI score0.00065EPSS
Exploits1References3
OSV
OSV
added 2026/01/27 10:15 p.m.1 views

AZL-75293 CVE-2026-24747 affecting package pytorch for versions less than 2.2.2-11

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...

8.8CVSS6.1AI score0.00065EPSS
Exploits1References1
NVD
NVD
added 2026/01/27 10:15 p.m.2 views

CVE-2026-24747

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...

8.8CVSS0.00065EPSS
Exploits1References4
OSV
OSV
added 2026/01/27 10:15 p.m.0 views

AZL-75588 CVE-2026-24747 affecting package pytorch for versions less than 2.0.0-14

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...

8.8CVSS6AI score0.00065EPSS
Exploits1References1
OSV
OSV
added 2026/01/27 10:15 p.m.2 views

DEBIAN-CVE-2026-24747

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...

8.8CVSS5.8AI score0.00065EPSS
Exploits1References1
OSV
OSV
added 2026/01/27 10:15 p.m.1 views

UBUNTU-CVE-2026-24747

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...

8.8CVSS6AI score0.00065EPSS
Exploits1References6
UbuntuCve
UbuntuCve
added 2026/01/27 10:15 p.m.1 views

CVE-2026-24747

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...

8.8CVSS6.1AI score0.00065EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/27 9:13 p.m.2 views

CVE-2026-24747

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...

8.8CVSS6.1AI score0.00065EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/27 9:13 p.m.16 views

CVE-2026-24747 PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...

8.8CVSS0.00065EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/01/27 9:13 p.m.2 views

CVE-2026-24747 PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...

8.8CVSS6.1AI score0.00065EPSS
Exploits1References4
EUVD
EUVD
added 2026/01/27 9:13 p.m.2 views

EUVD-2026-4738

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...

8.8CVSS6.1AI score0.00065EPSS
Exploits1References4
OSV
OSV
added 2026/01/27 9:13 p.m.1 views

CVE-2026-24747 PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...

8.8CVSS6.1AI score0.00065EPSS
Exploits1References6
Debian CVE
Debian CVE
added 2026/01/27 9:13 p.m.2 views

CVE-2026-24747

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...

8.8CVSS5.8AI score0.00065EPSS
Exploits1
CVE
CVE
added 2026/01/27 9:13 p.m.40 views

CVE-2026-24747

PyTorch prior to v2.10.0 is vulnerable to memory corruption and potential arbitrary code execution via the weights_only unpickler when loading a malicious .pth checkpoint with torch.load(..., weights_only=True). Affected software is PyTorch (Python tensor computation package); the issue is fixed ...

8.8CVSS6.1AI score0.00065EPSS
Exploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/01/27 8:10 p.m.8 views

PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

Summary A vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to arbitrary code execution. Vulnerability Details The weightsonly=True unpickler...

8.8CVSS6.3AI score0.00065EPSS
Exploits1References6Affected Software1
vulnersOsv
vulnersOsv
added 2026/01/27 8:10 p.m.2 views

aistructdynsolve (>=1.0.0 <=1.2.0), anoseg (=0.0.2) +82 more potentially affected by CVE-2026-24747 via pytorch (=1.0.2)

pytorch PYPI version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch and may be impacted: - aistructdynsolve =1.0.0, =0.3.0.1, =1.1.0, =1.1.1 and more Source cves: CVE-2026-24747 Source advisory: OSV:GHSA-63CW-57P8-FM3P...

8.8CVSS6AI score0.00065EPSS
Exploits1
OSV
OSV
added 2026/01/27 8:10 p.m.2 views

GHSA-63CW-57P8-FM3P PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

Summary A vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to arbitrary code execution. Vulnerability Details The weightsonly=True unpickler...

8.8CVSS6.3AI score0.00065EPSS
Exploits1References6
Rows per page
Query Builder