AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

PyTorchPYSEC-2024-250

PyTorch: out-of-bounds read

PyTorch

CVE-2024-31584 · Published Apr 19, 2024 · updated Jun 4, 2025

Medium5.5
Fix: upgrade to 2.2.0 or later
Source advisory

Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.

Affected versions

PackageAffectedFixed in
torch
PyPI
< 2.2.02.2.0

Changes since it was listed

SeveritySep 24Severity: Unrated to Medium
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Severity from
NVD
Also known as
BIT-pytorch-2024-31584, CVE-2024-31584

More PyTorch advisories

All PyTorch
Low 3.3Mar 30, 2025PyTorch susceptible to local Denial of ServiceCVE-2025-2953fixed in 2.7.1-rc1Low 2.5Mar 10, 2025A vulnerability was found in PyTorch 2.6.0+cu124CVE-2025-2149no fix yetLow 5.0Mar 10, 2025PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None ArgumentCVE-2025-2148no fix yetCritical 9.8Oct 29, 2024PyTorch: unsafe deserializationCVE-2024-48063fixed in 2.5.0High 7.5Apr 17, 2024PyTorch heap buffer overflow vulnerabilityCVE-2024-31580fixed in 2.2.0High 7.8Apr 17, 2024Pytorch use-after-free vulnerabilityCVE-2024-31583fixed in 2.2.0