CVE-2024-48063

creationtimestamp| type| source ---|---|--- 2024-10-29 23:08:23+00:00| seen| https://t.me/cvedetector/9354 2024-11-01 01:34:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8910...

01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +25234 more potentially affected by CVE-2024-48063 via torch (>=1.0.0 <=2.4.1)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 - a1facts =0.2.6 and more Source cves: CVE-2024-48063 Source advisory: OSV:PYSEC-2024-259...

UBUNTU-CVE-2024-48063

In PyTorch =2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed computing...