Use-after-free in PyTorch - CVE-2024-31583

Vulnerability identifier: #VU95800

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-31583

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error in torch/csrc/jit/mobile/interpreter.cpp. A local user can pass specially crafted input to the application and perform a denial of service (DoS) attack.

PyTorch
Python for Scientific Computing
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
IBM Maximo Application Suite

Install updates from vendor's website.

PyTorch - update to 2.2.0
Python for Scientific Computing - update to 4.2.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.7
App Connect Enterprise Certified Container - addressed in versions 5.0.18, 11.6.0
IBM Maximo Application Suite - addressed in versions 8.10.10, 8.11.7

• https://github.com/pytorch/pytorch/commit/9c7071b0e324f9fb68ab881283d6b8d388a4bcd2
• https://github.com/pytorch/pytorch/blob/v2.1.2/torch/csrc/jit/mobile/interpreter.cpp#L132
• https://gist.github.com/1047524396/43e19a41f2b36503a4a228c32cdbc176

• Multiple vulnerabilities in PyTorch
• Splunk Python for Scientific Computing update for third-party packages
• Multiple vulnerabilities in IBM Maximo Application Suite
• Multiple vulnerabilities in App Connect Enterprise Certified Container
• IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data update for PyTorch