Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
{ "vanir_signatures": [ { "id": "CVE-2024-31583-aad0f3a9", "signature_type": "Line", "digest": { "line_hashes": [ "171281326269689921682436190839311291909", "121189681070032044894008676224246023172", "104354271034547263340410601184272323230" ], "threshold": 0.9 }, "target": { "file": "torch/csrc/jit/mobile/interpreter.cpp" }, "deprecated": false, "signature_version": "v1", "source": "https://github.com/pytorch/pytorch/commit/9c7071b0e324f9fb68ab881283d6b8d388a4bcd2" }, { "id": "CVE-2024-31583-d97f5c85", "signature_type": "Function", "digest": { "function_hash": "60056572103566064283522839713397962286", "length": 5454.0 }, "target": { "file": "torch/csrc/jit/mobile/interpreter.cpp", "function": "InterpreterState::run" }, "deprecated": false, "signature_version": "v1", "source": "https://github.com/pytorch/pytorch/commit/9c7071b0e324f9fb68ab881283d6b8d388a4bcd2" } ] }