CVE-2024-31584

MEDIUM

Linuxfoundation Pytorch < 2.2.0 - Out-of-Bounds Read

Title source: rule
STIX 2.1

Description

Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.

References (2)

Core 2

Scores

CVSS v3 5.5
EPSS 0.0008
EPSS Percentile 22.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-125
Status published
Products (1)
linuxfoundation/pytorch < 2.2.0
Published Apr 19, 2024
Tracked Since Feb 18, 2026