CVE-2024-31583: Use After Free
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/torchto a version that resolves this vulnerability.Fixed in 2.2.0 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.0.0-4 - Upgrade
Upgrade
pytorchto a version that resolves this vulnerability.Fixed in v2.2.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31583?
CVE-2024-31583 is classified as a use-after-free vulnerability, which can lead to potential arbitrary code execution.
How do I fix CVE-2024-31583?
To fix CVE-2024-31583, update Pytorch to version 2.2.0 or later.
What versions of Pytorch are affected by CVE-2024-31583?
CVE-2024-31583 affects all Pytorch versions prior to 2.2.0.
Can CVE-2024-31583 be exploited remotely?
Yes, CVE-2024-31583 can potentially be exploited remotely depending on how Pytorch is utilized in an application.
What are the potential impacts of CVE-2024-31583?
The potential impacts of CVE-2024-31583 include crashes, data corruption, and arbitrary code execution.