Vulnerabilities

In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and run code as the TorchServe service account leading to local privilege escalation.

PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's read_from_tensor callback that passes unclamped length to memcpy.

PyTorch is a Python package that provides tensor computation.

PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system.

In the latest version of pytorch/serve, the script 'upload_results_to_s3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without ensuring its ownership or confirming its accessibility.

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production.

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production.

TorchServe is a tool for serving and scaling PyTorch models in production.

TorchServe is a tool for serving and scaling PyTorch models in production.