p PatchFirst

CVE-2024-31584

CVE-2024-31584

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.

CVSS 5.5 · Medium · EPSS 0.4% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • pytorch Debian:12

    Versions
    • 1.13.1+dfsg-4
    • 1.13.1+dfsg-5
    • 2.0.1+dfsg-1
    • 2.0.1+dfsg-1~exp1
    • 2.0.1+dfsg-2
    • 2.0.1+dfsg-4
    • 2.0.1+dfsg-5
    • 2.1.2+dfsg-1
    • 2.1.2+dfsg-2
    • 2.1.2+dfsg-4
    • 2.12.0+dfsg2-1
    • 2.12.0+dfsg2-1~exp1
    • 2.12.0+dfsg2-1~exp2
    • 2.12.0+dfsg2-2
    • 2.12.0+dfsg2-3
    • 2.12.0+dfsg2-4
    • 2.12.1+dfsg-1
    • 2.4.1-1
    • 2.4.1-3
    • 2.4.1-4
    • 2.5.0+dfsg-1
    • 2.5.1+dfsg-1
    • 2.5.1+dfsg-3
    • 2.5.1+dfsg-4
    • 2.6.0+dfsg-1
    • 2.6.0+dfsg-1~exp1
    • 2.6.0+dfsg-2
    • 2.6.0+dfsg-3
    • 2.6.0+dfsg-4
    • 2.6.0+dfsg-5
    • 2.6.0+dfsg-7
    • 2.6.0+dfsg-8
    • 2.6.0+dfsg-9
    • 2.6.0~rc9+dfsg-1~exp1
    • 2.9.0+dfsg-1~exp1
    • 2.9.0+dfsg-1~exp2
    • 2.9.1+dfsg-1~exp1
    • 2.9.1+dfsg-1~exp2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pytorch Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.4.1-1

    Update to 2.4.1-1

  • pytorch Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.4.1-1

    Update to 2.4.1-1

  • torch PyPI

    Versions
    • 1.0.0
    • 1.0.1
    • 1.1.0
    • 1.10.0
    • 1.10.1
    • 1.10.2
    • 1.11.0
    • 1.12.0
    • 1.12.1
    • 1.13.0
    • 1.13.1
    • 1.2.0
    • 1.3.0
    • 1.3.1
    • 1.4.0
    • 1.5.0
    • 1.5.1
    • 1.6.0
    • 1.7.0
    • 1.7.1
    • 1.8.0
    • 1.8.1
    • 1.9.0
    • 1.9.1
    • 2.0.0
    • 2.0.1
    • 2.1.0
    • 2.1.1
    • 2.1.2
    Affected ranges
    • {"events": [{"introduced": "0"}, {"fixed": "7c35874ad664e74c8e4252d67521f3986eadb0e6"}, {"fixed": "7c35874ad664e74c8e4252d67521f3986eadb0e6"}], "repo": "https://github.com/pytorch/pytorch", "type": "GIT"}
    • ECOSYSTEM: < 2.2.0

    Update to 2.2.0

  • pytorch Ubuntu:22.04:LTS

    Versions
    • 1.7.1-7
    • 1.8.1-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pytorch Ubuntu:25.10

    Versions
    • 2.6.0+dfsg-5build1
    • 2.6.0+dfsg-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pytorch Ubuntu:26.10

    Versions
    • 2.9.1+dfsg-1~exp1ubuntu2
    • 2.12.1+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pytorch Ubuntu:26.04:LTS

    Versions
    • 2.6.0+dfsg-7
    • 2.6.0+dfsg-9
    • 2.9.1+dfsg-1~exp1ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →