CVE-2024-31584 Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Discovered in PyTorch Before Version 2.2.0 Three vulnerabilities have been identified in PyTorch versions prior to 2.2.0, affecting various components. CVE-2024-31580 is a heap buffer overflow allowing Denial of Service, CVE-2024-31583 is a use-after-free vulnerability, and CVE-2024-31584 involves an out-of-bounds read. Users of affected versions are advised to update to mitigate these risks. 4 sources 41

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (1)