1634 matches found
CVE-2024-31583
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...
CVE-2024-31583
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...
PT-2024-5965 · Pytorch +1 · Pytorch +1
Name of the Vulnerable Software and Affected Versions: Pytorch versions prior to v2.2.0 Description: The issue is related to a use-after-free vulnerability in the torch/csrc/jit/mobile/interpreter.cpp component of the PyTorch machine learning framework. This vulnerability can be exploited to...
CVE-2024-31580
PyTorch versions prior to v2.2.0 are vulnerable to a heap buffer overflow in the /runtime/vararg_functions.cpp component. This flaw allows an attacker to cause a Denial of Service (DoS) by providing a crafted input. Impacted products include Watson Machine Learning on Cloud Pak for Data (versions...
CVE-2024-31580
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/varargfunctions.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-31580
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/varargfunctions.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PyTorch Serve Server-Side Request Forgery
PyTorch Serve version prior to 0.8.2 and versions using a default configuration are vulnerable to a Server-Side Request Forgery allowing an unauthenticated user to write a file to disk, that can lead to an arbitrary code execution. No source data...
BIT-PYTORCH-2022-45907
In PyTorch before trunk/89695, torch.jit.annotations.parsetypeline can cause arbitrary code execution because eval is used unsafely...
New Hugging Face Vulnerability Exposes AI Models to Supply Chain Attacks
Cybersecurity researchers have found that it's possible to compromise the Hugging Face Safetensors conversion service to ultimately hijack the models submitted by users and result in supply chain attacks. "It's possible to send malicious pull requests with attacker-controlled data from the Huggin...
AZL-35148 CVE-2024-27319 affecting package pytorch for versions less than 2.2.2-1
Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNXASSERT and ONNXASSERTM functions have an off by one string copy...
AZL-34464 CVE-2024-27318 affecting package pytorch for versions less than 2.0.0-6
Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the externaldata field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch adde...
AZL-35146 CVE-2024-27318 affecting package pytorch for versions less than 2.2.2-1
Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the externaldata field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch adde...
AZL-34465 CVE-2024-27319 affecting package pytorch for versions less than 2.0.0-4
Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNXASSERT and ONNXASSERTM functions have an off by one string copy...
GHSA-3F63-HFP8-52JQ vulnerabilities
Vulnerabilities for packages: py3-pillow, kubeflow-pipelines-visualization-server, py3-seaborn...
GHSA-3F63-HFP8-52JQ vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-seaborn, py3-pillow...
CVE-2023-50447 vulnerabilities
Vulnerabilities for packages: py3-pillow, kubeflow-pipelines-visualization-server, py3-seaborn...
CVE-2023-50447 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-seaborn, py3-pillow...
GHSA-H5C8-RQWP-CP95 vulnerabilities
Vulnerabilities for packages: py3-jinja2, checkov, reflex, kubeflow-pipelines-visualization-server...