169 matches found
PYSEC-2024-251
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...
AZL-39942 CVE-2024-31583 affecting package pytorch for versions less than 2.0.0-4
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...
PYSEC-2024-252
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/varargfunctions.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PyTorch 安全漏洞
PyTorch is a Python package open-sourced by PyTorch. A security vulnerability exists in PyTorch versions prior to v2.2.0 that stems from the inclusion of a heap buffer overflow vulnerability that allows an attacker to cause a denial of service DoS via crafted input...
PT-2024-6375
Name of the Vulnerable Software and Affected Versions PyTorch versions prior to 2.2.0 Description The issue is related to a heap buffer overflow in the /runtime/vararg functions.cpp component. This allows attackers to cause a Denial of Service DoS via a crafted input. The vulnerability is...
AZL-35146 CVE-2024-27318 affecting package pytorch for versions less than 2.2.2-1
Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the externaldata field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch adde...
Warning: PyTorch Models Vulnerable to Remote Code Execution via ShellTorch
Cybersecurity researchers have disclosed multiple critical security flaws in the TorchServe tool for serving and scaling PyTorch models that could be chained to achieve remote code execution on affected systems. Israel-based runtime application security company Oligo, which made the discovery, ha...
GHSA-47FC-VMWQ-366V PyTorch vulnerable to arbitrary code execution
In PyTorch before trunk/89695, torch.jit.annotations.parsetypeline can cause arbitrary code execution because eval is used unsafely. The fix for this issue is available in version 1.13.1. There is a release checker in issue 89855...
