-
Notifications
You must be signed in to change notification settings - Fork 196
[FEATURE] Upgrade Pytorch Version #3515
Description
Is your feature request related to a problem?
Currently for local model, ml-commons is using Pytorch 1.13.1
But this version has multiple vulnerabilities:
- Use After Free Vulnerability:
Description: Improper memory handling in the interpreter.cpp component can lead to a use-after-free condition, potentially allowing attackers to execute arbitrary code or cause a denial of service.
Affected Versions: Versions prior to 2.2.0. (ref)
- Heap-based Buffer Overflow:
Description: A heap-based buffer overflow in the /runtime/vararg_functions.cpp component can be exploited by attackers to cause a crash or potentially execute arbitrary code by supplying crafted input.
Affected Versions: Versions prior to 2.2.0. (ref)
What solution would you like?
We should upgrade the pytorch version and make the corresponding changes in the code base to address that upgrade.
What alternatives have you considered?
A clear and concise description of any alternative solutions or features you've considered.
Do you have any additional context?
Add any other context or screenshots about the feature request here.
Metadata
Metadata
Assignees
Labels
Type
Projects
Status