p PatchFirst

CVE-2024-31580

CVE-2024-31580

This page contains facts from public vulnerability sources. Check the original advisory before updating.

PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVSS 4.0 · Medium · EPSS 0.2% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • pytorch Debian:12

    Versions
    • 1.13.1+dfsg-4
    • 1.13.1+dfsg-5
    • 2.0.1+dfsg-1
    • 2.0.1+dfsg-1~exp1
    • 2.0.1+dfsg-2
    • 2.0.1+dfsg-4
    • 2.0.1+dfsg-5
    • 2.1.2+dfsg-1
    • 2.1.2+dfsg-2
    • 2.1.2+dfsg-4
    • 2.12.0+dfsg2-1
    • 2.12.0+dfsg2-1~exp1
    • 2.12.0+dfsg2-1~exp2
    • 2.12.0+dfsg2-2
    • 2.12.0+dfsg2-3
    • 2.12.0+dfsg2-4
    • 2.12.1+dfsg-1
    • 2.4.1-1
    • 2.4.1-3
    • 2.4.1-4
    • 2.5.0+dfsg-1
    • 2.5.1+dfsg-1
    • 2.5.1+dfsg-3
    • 2.5.1+dfsg-4
    • 2.6.0+dfsg-1
    • 2.6.0+dfsg-1~exp1
    • 2.6.0+dfsg-2
    • 2.6.0+dfsg-3
    • 2.6.0+dfsg-4
    • 2.6.0+dfsg-5
    • 2.6.0+dfsg-7
    • 2.6.0+dfsg-8
    • 2.6.0+dfsg-9
    • 2.6.0~rc9+dfsg-1~exp1
    • 2.9.0+dfsg-1~exp1
    • 2.9.0+dfsg-1~exp2
    • 2.9.1+dfsg-1~exp1
    • 2.9.1+dfsg-1~exp2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pytorch Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.4.1-1

    Update to 2.4.1-1

  • pytorch Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.4.1-1

    Update to 2.4.1-1

  • torch PyPI

    Versions
    • 1.0.0
    • 1.0.1
    • 1.1.0
    • 1.10.0
    • 1.10.1
    • 1.10.2
    • 1.11.0
    • 1.12.0
    • 1.12.1
    • 1.13.0
    • 1.13.1
    • 1.2.0
    • 1.3.0
    • 1.3.1
    • 1.4.0
    • 1.5.0
    • 1.5.1
    • 1.6.0
    • 1.7.0
    • 1.7.1
    • 1.8.0
    • 1.8.1
    • 1.9.0
    • 1.9.1
    • 2.0.0
    • 2.0.1
    • 2.1.0
    • 2.1.1
    • 2.1.2
    Affected ranges
    • ECOSYSTEM: < 2.2.0

    Update to 2.2.0

  • torch PyPI

    Versions
    • 1.0.0
    • 1.0.1
    • 1.1.0
    • 1.10.0
    • 1.10.1
    • 1.10.2
    • 1.11.0
    • 1.12.0
    • 1.12.1
    • 1.13.0
    • 1.13.1
    • 1.2.0
    • 1.3.0
    • 1.3.1
    • 1.4.0
    • 1.5.0
    • 1.5.1
    • 1.6.0
    • 1.7.0
    • 1.7.1
    • 1.8.0
    • 1.8.1
    • 1.9.0
    • 1.9.1
    • 2.0.0
    • 2.0.1
    • 2.1.0
    • 2.1.1
    • 2.1.2
    • ciflow/unstable/123
    • bc2caa7fdf006894eff7af936babde69ab5a40f8-huydhn-debug
    • ciflow/periodic/3e98831
    • ciflow/slow/da3aba1e46157c4df504b067477cdf2b3c96b194-sdym
    • ciflow/slow/0d5b74da0cab798fbfdb9caa53fad816999c8386-sdym
    • ciflow/slow/8751002215790a3a88750faa8f4366933e296693-sdym
    • ciflow/slow/a837609
    • ciflow/slow/788ff06
    • ciflow/slow/1faef89
    • ciflow/slow/187eb7c
    • ciflow/slow/01c7106
    • ciflow/slow/3920ec1
    • ciflow/slow/0577043
    • ciflow/slow/a206e8b
    • ciflow/slow/59a3759
    • ciflow/slow/1732077
    • ciflow/slow/9d85864
    • ciflow/slow/0e81104
    • ciflow/slow/3b7c6b2
    • ciflow/slow/70ef0bb
    • ciflow/slow/af841f3
    • ciflow/slow/9ffad5b
    • ciflow/periodic/94512-point
    • ciflow/inductor/3d4b92b
    • ciflow/inductor/3b9a386
    • ciflow/inductor/d224ac7
    • ciflow/periodic/csl/test87519
    • ciflow/periodic/csltest88761
    • ciflow/periodic/csltest88275
    • ciflow/periodic/317eeb8
    • ciflow/periodic/2a6d37d
    • ciflow/periodic/3c32
    • ciflow/periodic/054a2fd
    • ciflow/periodic/sha-ec5b83
    • malfet/tag-2ef5611
    • malfet/tag-317b1a0
    • malfet/tag-ec6f767
    • nightly-binary
    • v1.8.0-rc1
    • v1.4.0a0
    • v1.3.0a0
    • v1.2.0a0
    • v1.1.0a0
    • v1.0rc1
    • v1.0rc0
    • v1.0.0a0
    • v0.1.11
    • v0.1.10
    • v0.1.9
    • v0.1.8
    • v0.1.7
    • v0.1.6
    • v0.1.5
    • v0.1.4
    • v0.1.3
    • v0.1.2
    • v0.1.1
    Affected ranges
    • {"events": [{"introduced": "0"}, {"fixed": "b5c3a17c2c207ebefcb85043f0cf94be9b2fef81"}, {"fixed": "b5c3a17c2c207ebefcb85043f0cf94be9b2fef81"}], "repo": "https://github.com/pytorch/pytorch", "type": "GIT"}
    • ECOSYSTEM: < 2.2.0

    Update to 2.2.0

  • torch-npu PyPI

    Versions
    • 2.1.0
    • 2.1.0.post10
    • 2.1.0.post12
    • 2.1.0.post13
    • 2.1.0.post17
    • 2.1.0.post3
    • 2.1.0.post6
    • 2.1.0.post8
    • 2.1.0rc1
    • 2.2.0rc1
    Affected ranges
    • ECOSYSTEM: < 2.2.0

    Update to 2.2.0

  • pytorch Ubuntu:22.04:LTS

    Versions
    • 1.7.1-7
    • 1.8.1-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pytorch Ubuntu:25.10

    Versions
    • 2.6.0+dfsg-5build1
    • 2.6.0+dfsg-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pytorch Ubuntu:26.10

    Versions
    • 2.9.1+dfsg-1~exp1ubuntu2
    • 2.12.1+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pytorch Ubuntu:26.04:LTS

    Versions
    • 2.6.0+dfsg-7
    • 2.6.0+dfsg-9
    • 2.9.1+dfsg-1~exp1ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →