GitHub Repos· Oct 28, 2026· by s1ko

s1ko/pytorch-jit-load-oob-read

Open Original Article ↗
Two out-of-bounds reads in PyTorch TorchScript archive loading (torch.jit.load): unchecked source-range text index and storage size vs record size. Unpatched; upstream scopes TorchScript out.
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#cwe-125#memory-safety#pytorch#security#torchscript#vulnerability-research