Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.
Date: 2024-04
Affected: linuxfoundation/pytorch
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2024-31584
CWE: CWE-125
CVSS: 5.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L)

Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.


Mitigations:

Architectural layers (MAESTRO):