#checkpoints

PyTorch safe checkpoint loader can expose process heap

A crafted file can make the default weights-only loader return a tensor filled with leftover memory, without running pickle code.