CVE-2025-65213: Deserialization of Untrusted Data

MooreThreads torchmusa through all versions contains an unsafe deserialization vulnerability in torchmusa.utils.comparetool. The compareforsingleop and naninftrackforsingleop functions use pickle.load on user-controlled file paths without validation, allowing arbitrary code execution. An attacker...

torch_musa 安全漏洞

torchmusa is an open source repository open-sourced by Moore Threads Corporation. A security vulnerability exists in torchmusa, which stems from unsafe deserialization in torchmusa.utils.comparetool that could lead to the execution of arbitrary code...