CVE-2024-11394 Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in th...

CVE-2024-53425

A heap buffer overflow vulnerability was found in the Assimp package. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash...

CVE-2024-53425

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash...

CVE-2024-53425

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash...

CVE-2024-53425

CVE-2024-53425 affects the Open Asset Import Library (Assimp) v5.4.3. The issue is a heap-buffer-overflow in the function SkipSpacesAndLineEnd when processing certain malformed MD5 model files, causing an out-of-bounds read and potential crash. Public details in the connected advisories confirm t...

CVE-2024-53425

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash...

CVE-2024-53425

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash...

(0Day) Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2024-16957 · Hugging Face · Huggingface/Transformers

Name of the Vulnerable Software and Affected Versions: Hugging Face Transformers affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this issue,...

The vulnerability of the ASMkern229A.dll and ASMBASE229A.dll libraries, which are software components for modeling, design, and drawing in AutoCAD, allows a malicious actor to cause an unexpected termination of the application or execute arbitrary code.

The vulnerability of the ASMkern229A.dll and ASMBASE229A.dll libraries, which are software components for modeling, design, and drafting in AutoCAD, relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to cause the application to terminat...

The vulnerabilities of the libraries atf_dwg_consumer.dll, rose_x64_vc15.dll, and libodxdll, which are part of the AutoCAD simulation, design, and drafting software, allow a malicious actor to execute arbitrary code.

The vulnerability of the atfdwgconsumer.dll, rosex64vc15.dll, and libodxdll libraries, which are used in AutoCAD software for simulation, design, and drafting, relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or perfo...

The vulnerability of the opennurbs.dll library, a software for modeling, designing, and drafting in AutoCAD, allows a malicious actor to cause the application to terminate abnormally or execute arbitrary code.

The vulnerability of the opennurbs.dll library, a software component used for modeling, designing, and drafting in AutoCAD, relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally or execute...

The vulnerability of the libodx.dll library in the AutoCAD modeling, design, and drawing software allows a perpetrator to cause an unexpected termination of the application or execute arbitrary code.

The vulnerability of the libodx.dll library in AutoCAD simulation, design, and drawing software relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally or execute arbitrary code using a...

The vulnerability of the libodxdll.dll library in the AutoCAD modeling, design, and drafting software allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the libodxdll.dll library in the AutoCAD modeling, design, and drafting software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, execute...

CVE-2024-48425

A flaw was found in the Assimp asset import library. An attacker may be able to trigger a segmentation fault using specially-crafted 3D model files. This can result in a denial of service due to invalid memory access. Mitigation Mitigation for this issue is either not available or the currently...

Arbitrary Code Execution

Overview sentence-transformers is a State-of-the-Art Text Embeddings Affected versions of this package are vulnerable to Arbitrary Code Execution when loading PyTorch model files. The torch.load function, used without the weightsonly=True parameter, could deserialize malicious Python objects from...

CVE-2024-4897

parisneo/lollms-webui, in its latest version, is vulnerable to remote code execution due to an insecure dependency on llama-cpp-python version llamacpppython-0.2.61+cpuavx2-cp311-cp311-manylinux231x8664. The vulnerability arises from the application's 'bindingzoo' feature, which allows attackers ...

CVE-2024-4897 Remote Code Execution in parisneo/lollms-webui

parisneo/lollms-webui, in its latest version, is vulnerable to remote code execution due to an insecure dependency on llama-cpp-python version llamacpppython-0.2.61+cpuavx2-cp311-cp311-manylinux231x8664. The vulnerability arises from the application's 'bindingzoo' feature, which allows attackers ...

CVE-2024-4897 Remote Code Execution in parisneo/lollms-webui

parisneo/lollms-webui, in its latest version, is vulnerable to remote code execution due to an insecure dependency on llama-cpp-python version llamacpppython-0.2.61+cpuavx2-cp311-cp311-manylinux231x8664. The vulnerability arises from the application's 'bindingzoo' feature, which allows attackers ...

CVE-2024-4897

The CVE-2024-4897 entry affects parisneo/lollms-webui via an insecure dependency on llama-cpp-python (llama_cpp_python-0.2.61+cpuavx2-...), with exploitation possible through the bindings_zoo feature when processing gguf model files. Connected Red Hat CVE-2024-34359 documents explain that the roo...