1373 matches found
CVE-2024-37059
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with...
CVE-2024-37059
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with...
CVE-2024-37059
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with...
CVE-2024-37059
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with...
PT-2024-27274
Name of the Vulnerable Software and Affected Versions MLflow versions 0.5.0 and newer Description The issue allows deserialization of untrusted data, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user's system when interacted with. Recommendations For MLflow versio...
CVE-2024-37059: Deserialization of Untrusted Data
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with...
Exploit for Server-Side Request Forgery in Pytorch Torchserve
CVE-2023-43654 ShellTorch is a chain of 3 Critical...
CVE-2024-27318 affecting package pytorch for versions less than 2.0.0-6
CVE-2024-27318 affecting package pytorch for versions less than 2.0.0-6. A patched version of the package is available...
CVE-2024-31584 affecting package pytorch for versions less than 2.0.0-5
CVE-2024-31584 affecting package pytorch for versions less than 2.0.0-5. A patched version of the package is available...
CVE-2024-27319 affecting package pytorch for versions less than 2.0.0-4
CVE-2024-27319 affecting package pytorch for versions less than 2.0.0-4. A patched version of the package is available...
CVE-2024-31583 affecting package pytorch for versions less than 2.0.0-4
CVE-2024-31583 affecting package pytorch for versions less than 2.0.0-4. A patched version of the package is available...
CVE-2024-31580 affecting package pytorch for versions less than 2.0.0-4
CVE-2024-31580 affecting package pytorch for versions less than 2.0.0-4. A patched version of the package is available...
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.
...
SUSE CVE-2024-31584
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbufferloader.cpp...
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
...
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
...
Out-Of-Bounds Read
Pytorch is vulnerable to an Out-of-bounds Read. The vulnerability is caused due to a missing validation for mobileivaluesize variable for a value greater than ivalues-size in function FlatbufferLoader::parseModule within torch/csrc/jit/mobile/flatbufferloader.cpp. This introduces potential for...
AZL-40043 CVE-2024-31584 affecting package pytorch for versions less than 2.0.0-5
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbufferloader.cpp...