Nixpkgs Security Tracker

Login with GitHub

Suggestions search

With package: python312Packages.facenet-pytorch

Found 1 matching suggestions

Untriaged
created 1 week, 6 days ago
PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that, when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to arbitrary code execution. Version 2.10.0 fixes the issue.

Affected products

pytorch
  • ==< 2.10.0

Matching in nixpkgs

Package maintainers