A vulnerability in PyTorch prior to version 2.10.0 allows remote attackers to execute arbitrary code by crafting malicious checkpoint files (.pth) that exploit the weights_only unpickler. This flaw leads to memory corruption when loading such files with torch.load(..., weights_only=True). The issue is fixed in PyTorch 2.10.0.