CVE-2024-27319: CVE-2024-27319 affecting package pytorch for versions less than 2.0.0-4

Severity: Critical

CVSS Score: 4.4

Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.