CyberRota Analysis
AI-GeneratedThe vulnerability affects the GIF decoder in PyTorch's torchvision library up to version 0.28.0, allowing attackers to exploit out-of-bounds heap reads by supplying malicious or truncated GIF files. This can lead to denial of service through segmentation faults or potentially disclose sensitive adjacent heap memory contents. Organizations using affected versions of PyTorch torchvision should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's read_from_tensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fault or disclose adjacent heap memory contents.
Related CVEs
Other vulnerabilities affecting the same vendor(s)