PyTorch heap buffer overflow vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-31580 · ADVISORY
• pytorch/pytorch commit b5c3a17 · WEB
• gist.github.com/1047524396/038c78f2f007345e6f497698ace2aa3d · WEB
• pypa/advisory-database · WEB
• pytorch/pytorch · PACKAGE
• security.snyk.io/vuln/SNYK-PYTHON-TORCH-6649934 · WEB
• GitHub Advisory GHSA-5pcm-hx3q-hm94 · ADVISORY

torch의 다른 취약점

• CVE-2026-4538높음 7.8A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The mani…
• CVE-2026-24747높음 8.8PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler…
• CVE-2025-63396낮음 3.3An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or …
• CVE-2025-55560높음 7.5An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.…
• CVE-2025-55558높음 7.5A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tenso…