33 matches found
PT-2025-12116
Name of the Vulnerable Software and Affected Versions open-mmlab/mmdetection version v3.3.0 Description A remote code execution issue exists due to the use of the pickle.loads function in the all reduce dict distributed training API without proper sanitization, allowing an attacker to execute...
PT-2025-12261
Name of the Vulnerable Software and Affected Versions vllm-project vllm version 0.6.0 Description The issue concerns a remote code execution vulnerability in the distributed training API. Specifically, the vllm.distributed.GroupCoordinator.recv object function deserializes received object bytes...
Out-of-bounds Write
Overview lightgbm is a gradient boosting framework that uses tree based learning algorithms. Affected versions of this package are vulnerable to Out-of-bounds Write in linkerssocket.cpp, used during initialization of distributed training. An attacker can exploit a race condition to connect to a...
CVE-2024-5480
A vulnerability in PyTorch's torch.distributed.rpc framework, specifically in versions prior to 2.2.2, allows for remote code execution RCE. The framework, which is used in distributed training scenarios, does not properly verify the functions being called during RPC Remote Procedure Call...
PyTorch < 2.2.2 RCE
The remote host contains a torchserve version that is prior to 2.2.2. It is, therefore, affected by a remote code execution vulnerability. A vulnerability in the PyTorch's torch.distributed.rpc framework, specifically in versions prior to 2.2.2, allows for remote code execution RCE. The framework...
CVE-2024-5480
A vulnerability in the PyTorch's torch.distributed.rpc framework, specifically in versions prior to 2.2.2, allows for remote code execution RCE. The framework, which is used in distributed training scenarios, does not properly verify the functions being called during RPC Remote Procedure Call...
CVE-2024-5480
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-5480
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-5480
CVE-2024-5480 is a valid vulnerability describing a remote code execution in PyTorch’s torch.distributed.rpc framework prior to version 2.2.2. Red Hat’s entry details an RCE arising when a worker serializes and sends a PythonUDF to the master and the master deserializes/executes it without proper...
CVE-2024-5480
Removed by vendor...
PT-2024-4009 · Pytorch · Pytorch
Name of the Vulnerable Software and Affected Versions: PyTorch versions prior to 2.2.2 Description: The vulnerability in PyTorch's torch.distributed.rpc framework allows for remote code execution RCE due to the lack of proper verification of functions being called during RPC operations. This...