Skip to content

[FEATURE] Upgrade Pytorch Version #3515

@dhrubo-os

Description

@dhrubo-os

Is your feature request related to a problem?

Currently for local model, ml-commons is using Pytorch 1.13.1

But this version has multiple vulnerabilities:

  1. Use After Free Vulnerability:

Description: Improper memory handling in the interpreter.cpp component can lead to a use-after-free condition, potentially allowing attackers to execute arbitrary code or cause a denial of service.
Affected Versions: Versions prior to 2.2.0. (ref)

  1. Heap-based Buffer Overflow:

Description: A heap-based buffer overflow in the /runtime/vararg_functions.cpp component can be exploited by attackers to cause a crash or potentially execute arbitrary code by supplying crafted input.
Affected Versions: Versions prior to 2.2.0. (ref)

What solution would you like?

We should upgrade the pytorch version and make the corresponding changes in the code base to address that upgrade.

What alternatives have you considered?
A clear and concise description of any alternative solutions or features you've considered.

Do you have any additional context?
Add any other context or screenshots about the feature request here.

Metadata

Metadata

Labels

enhancementNew feature or request

Type

No type

Projects

Status

Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions