You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently for local model, ml-commons is using Pytorch 1.13.1
But this version has multiple vulnerabilities:
Use After Free Vulnerability:
Description: Improper memory handling in the interpreter.cpp component can lead to a use-after-free condition, potentially allowing attackers to execute arbitrary code or cause a denial of service.
Affected Versions: Versions prior to 2.2.0. (ref)
Heap-based Buffer Overflow:
Description: A heap-based buffer overflow in the /runtime/vararg_functions.cpp component can be exploited by attackers to cause a crash or potentially execute arbitrary code by supplying crafted input.
Affected Versions: Versions prior to 2.2.0. (ref)
What solution would you like?
We should upgrade the pytorch version and make the corresponding changes in the code base to address that upgrade.
What alternatives have you considered?
A clear and concise description of any alternative solutions or features you've considered.
Do you have any additional context?
Add any other context or screenshots about the feature request here.
The text was updated successfully, but these errors were encountered:
Is your feature request related to a problem?
Currently for local model, ml-commons is using Pytorch 1.13.1
But this version has multiple vulnerabilities:
Description: Improper memory handling in the interpreter.cpp component can lead to a use-after-free condition, potentially allowing attackers to execute arbitrary code or cause a denial of service.
Affected Versions: Versions prior to 2.2.0. (ref)
Description: A heap-based buffer overflow in the /runtime/vararg_functions.cpp component can be exploited by attackers to cause a crash or potentially execute arbitrary code by supplying crafted input.
Affected Versions: Versions prior to 2.2.0. (ref)
What solution would you like?
We should upgrade the pytorch version and make the corresponding changes in the code base to address that upgrade.
What alternatives have you considered?
A clear and concise description of any alternative solutions or features you've considered.
Do you have any additional context?
Add any other context or screenshots about the feature request here.
The text was updated successfully, but these errors were encountered: