Pytorch use-after-free vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-31583 · ADVISORY
• pytorch/pytorch commit 9c7071b · WEB
• gist.github.com/1047524396/43e19a41f2b36503a4a228c32cdbc176 · WEB
• pypa/advisory-database · WEB
• pytorch/pytorch · PACKAGE
• pytorch/pytorch · WEB
• security.snyk.io/vuln/SNYK-PYTHON-TORCH-6619806 · WEB
• GitHub Advisory GHSA-pg7h-5qx3-wjr3 · ADVISORY

Lỗ hổng khác của torch

• CVE-2026-4538CAO 7.8A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The mani…
• CVE-2026-24747CAO 8.8PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler…
• CVE-2025-63396THẤP 3.3An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or …
• CVE-2025-55560CAO 7.5An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.…
• CVE-2025-55558CAO 7.5A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tenso…