BIT-pytorch-2022-45907

Import Source

https://github.com/bitnami/vulndb/tree/main/data/pytorch/BIT-pytorch-2022-45907.json

Aliases

• CVE-2022-45907
• GHSA-47fc-vmwq-366v
• PYSEC-2022-43015

Published

2024-03-06T11:02:51.602Z

Modified

2024-03-06T11:25:28.861Z

Details

In PyTorch before trunk/89695, torch.jit.annotations.parsetypeline can cause arbitrary code execution because eval is used unsafely.

References

• https://github.com/pytorch/pytorch/commit/767f6aa49fe20a2766b9843d01e3b7f7793df6a3
• https://github.com/pytorch/pytorch/issues/88868