CVE-2024-31583 Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Discovered in PyTorch Before Version 2.2.0 Three vulnerabilities have been identified in PyTorch versions prior to 2.2.0, affecting various components. CVE-2024-31580 is a heap buffer overflow allowing Denial of Service, CVE-2024-31583 is a use-after-free vulnerability, and CVE-2024-31584 involves an out-of-bounds read. Users of affected versions are advised to update to mitigate these risks. 4 sources 41