{"data":{"id":"78f68875-3d79-438f-9f36-74b64dcc2a1e","title":"CVE-2024-31584: Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component…","summary":"CVE-2024-31584 is an out-of-bounds read vulnerability in PyTorch versions before v2.2.0. The flaw sits in the component torch/csrc/jit/mobile/flatbuffer_loader.cpp and is classified as CWE-125 (Out-of-bounds Read). NVD had not yet provided an assessment at the time of the source text.","solution":"The source links a commit, 7c35874ad664e74c8e4252d67521f3986eadb0e6, in the PyTorch repository, tagged as a patch, but it does not state a fixed version, configuration change or workaround in the text. N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-31584","publishedAt":"2024-04-20T01:15:08.080Z","cveId":"CVE-2024-31584","cweIds":["CWE-125"],"cvssScore":"5.5","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["PyTorch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Pytorch out-of-bounds read in flatbuffer loader via mobile JIT component","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00383,"epssCheckedAt":"2026-11-04T12:08:33.434Z","kevDateAdded":null,"advisoryAliases":["GHSA-vmg3-jxcp-7rqw"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T06:09:49.139Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-540"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}