231 matches found
CVE-2025-3162
CVE-2025-3162 affects InternLM LMDeploy (up to 0.7.1). Affected is the function load_weight_ckpt in lmdeploy/lmdeploy/vl/model/utils.py (PT File Handler). The underlying issue is insecure/deserialization of inputs, enabling a local attacker to manipulate deserialization. Attacking locally is a re...
CVE-2025-3162 InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization
A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement...
CVE-2025-3162 InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization
A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement...
CVE-2025-3162 InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization
A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement...
lmdeploy security vulnerability
lmdeploy is an InternLM open source toolkit for compressing, deploying and serving LLM. A security vulnerability exists in lmdeploy version 0.7.1 and earlier, which stems from a deserialization issue in the PT file handling component...
PT-2025-14771
Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions up to 0.7.1 Description A critical vulnerability was found in InternLM LMDeploy, affecting the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection, and it is possible to launc...
PT-2025-14770
Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions up to 0.7.1 Description A critical issue was found in InternLM LMDeploy, affecting the function load weight ckpt of the file lmdeploy/lmdeploy/vl/model/utils.py in the component PT File Handler. The manipulation lead...
lmdeploy security vulnerability
lmdeploy is an InternLM open source toolkit for compressing, deploying and servicing LLM. A security vulnerability exists in lmdeploy version 0.7.1 and earlier, which stems from a code injection issue...
CVE-2025-3163: Improper Control of Generation of Code
A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit has...
CVE-2025-3162: Deserialization of Untrusted Data
A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement...
lmdeploy (0.0.14) potentially affected by CVE-2024-8966 via gradio (4.0.0b15)
gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-8966 Source advisory: OSV:GHSA-5CPQ-9538-JM2J...
lmdeploy (0.0.14) potentially affected by CVE-2024-12217 via gradio (4.0.0b15)
gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-12217 Source advisory: OSV:GHSA-PRPG-P95C-32FV...
lmdeploy (0.0.14) potentially affected by CVE-2025-23042 via gradio (4.0.0b15)
gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2025-23042 Source advisory: OSV:PYSEC-2025-118...
lmdeploy (0.0.14) potentially affected by CVE-2025-23042 via gradio (4.0.0b15)
gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2025-23042 Source advisory: OSV:GHSA-J2JG-FQ62-7C3H...
lmdeploy (0.0.14) potentially affected by CVE-2024-47872 via gradio (4.0.0b15)
gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-47872 Source advisory: OSV:PYSEC-2024-220...
lmdeploy (0.0.14) potentially affected by CVE-2024-47870 via gradio (4.0.0b15)
gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...
lmdeploy (0.0.14) potentially affected by CVE-2024-47871 via gradio (4.0.0b15)
gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-47871 Source advisory: OSV:PYSEC-2024-219...
lmdeploy (0.0.14) potentially affected by CVE-2024-47867 via gradio (4.0.0b15)
gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-47867 Source advisory: OSV:PYSEC-2024-216...
lmdeploy (0.0.14) potentially affected by CVE-2024-47868 via gradio (4.0.0b15)
gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-47868 Source advisory: OSV:PYSEC-2024-217...
lmdeploy (0.0.14) potentially affected by CVE-2024-47167 via gradio (4.0.0b15)
gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-47167 Source advisory: OSV:PYSEC-2024-215...