Database/AI/ML frameworks & serving
PyTorch (`torch.jit.annotations.parse_type_line`): Arbitrary code execution via unsafe `eval` in TorchScript type
CVE-2022-45907AI/ML frameworks & servingcurated
Impact
Arbitrary code execution via unsafe eval in TorchScript type parsing
Who can reach it
Customer-supplied TorchScript model file
What to do
Patch torch in base images; TorchScript ingest of untrusted models should be sandboxed regardless
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.