Heap Buffer Overflow Vulnerability in PyTorch by Meta AI

CVE-2024-31580

What is CVE-2024-31580?

A heap buffer overflow vulnerability was identified in PyTorch prior to version 2.2.0, specifically within the /runtime/vararg_functions.cpp component. This flaw allows attackers to craft specific inputs that trigger the vulnerability, potentially leading to a Denial of Service (DoS). The exploitation of this vulnerability could disrupt the normal operation of applications relying on PyTorch, thereby posing a security risk to users and developers relying on this framework.

References