CASIA-LMC-Lab Fast Segment Anything code injection vulnerability

CASIA-LMC-Lab Fast Segment Anything has a code injection vulnerability. This vulnerability stems from improper handling of the parameter imgsz/names/kptshape in the function session.getmodelmeta.custommetadatamap of the AutoBackend Model Loading component. This improper handling leads to incorrec...