GitHub Advisoryadvisory · PyPI

GHSA-pg7h-5qx3-wjr3 Pytorch use-after-free vulnerability

HIGH Published 2024-04-17 Modified 2025-06-10 Official page ↗
Aliases
CVE-2024-31583
Ecosystem
PyPI
Packages
torch
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-416
Reviewed
2024-07-25

Affected packages

• PyPI torch: < 2.2.0 → fixed in 2.2.0

Description

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.

Related

Alias · CVE (1)

  • CVE-2024-31583 Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp. vulnerability

Weakness · CWE (1)

References