Homepage
About Snyk

torch@2.1.0 vulnerabilities

Tensors and Dynamic neural networks in Python with strong GPU acceleration

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the torch package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Heap-based Buffer Overflow

torch is a Tensors and Dynamic neural networks in Python with strong GPU acceleration

Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the /runtime/vararg_functions.cpp component. An attacker can cause a crash or potentially execute arbitrary code by supplying crafted input.

How to fix Heap-based Buffer Overflow?

Upgrade torch to version 2.2.0 or higher.

[,2.2.0)
  • H
Use After Free

torch is a Tensors and Dynamic neural networks in Python with strong GPU acceleration

Affected versions of this package are vulnerable to Use After Free due to improper handling of memory in the interpreter.cpp component. An attacker can execute arbitrary code or cause a denial of service.

How to fix Use After Free?

Upgrade torch to version 2.2.0 or higher.

[,2.2.0)
Go back to all versions of this package