PyTorch Memory Corruption Vulnerability in LSTM Cell Function

A critical memory corruption vulnerability has been identified in PyTorch version 2.6.0, specifically within the 'torch.lstm_cell' function. This vulnerability leads to a segmentation fault, causing a hard crash instead of a runtime error. The issue arises when the function is called with improperly sized tensors, allowing for local exploitation.

Impact

Exploitation of this vulnerability causes a segmentation fault, leading to a hard crash of the application.

Reproduction

The vulnerability can be reproduced by calling the 'torch.lstm_cell' function with empty input tensors for 'inp', 'hx', and 'cx', and with excessively large values in the weight tensors 'w_ih' and 'w_hh'. This combination of parameters triggers the segmentation fault.