CVE-2024-31584

ADVISORY - nist

Summary

Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.

EPSS Score⁠: 0.00077 (0.239)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-125⁠

Out-of-bounds Read

Impacted images

Advisories

PypA

CREATED

1 year ago

UPDATED

4 months ago

ADVISORY ID

PYSEC-2024-250

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
torch	pypi	-	-	<2.2.0	2.2.0

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

1 year ago

UPDATED

4 months ago

ADVISORY IDCVE-2024-31584⁠

EXPLOITABILITY SCORE

2.1

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-125⁠

CVSS SCORE

5.5medium

Debian

CREATED

1 year ago

UPDATED

16 days ago

ADVISORY IDCVE-2024-31584⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

1 year ago

UPDATED

3 months ago

ADVISORY IDCVE-2024-31584⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Bitnami

CREATED

4 months ago

UPDATED

4 months ago

ADVISORY ID

BIT-pytorch-2024-31584

EXPLOITABILITY SCORE

2.1

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.5medium