—
PYSEC-2024-250
Quick fix
PYSEC-2024-250 — torch: upgrade to the fixed version with the command below.
pip install --upgrade 'torch>=7c35874ad664e74c8e4252d67521f3986eadb0e6'Details
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/torch
Introduced in:
0Fixed in: 7c35874ad664e74c8e4252d67521f3986eadb0e6Fix
pip install --upgrade 'torch>=7c35874ad664e74c8e4252d67521f3986eadb0e6'