PT-2022-5384 · Unknown · Torchvision

Published 2022-06-23 · Updated 2022-06-23

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:L/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TorchVision (affected versions not specified)

Description The issue is related to the decode png() function in TorchVision, a computer vision system, which is vulnerable to a buffer overflow when processing PNG files. This could allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2022-06698

Affected Products

Torchvision

References · 3

• https://bdu.fstec.ru/vul/2022-06698 · Security Note
• https://github.com/pytorch/vision/pull/6456 · Note
• https://github.com/pytorch/vision/pull/6456/commits/b27558f96e3129efa606f40e18be222fc4584d5d · Note