3 matches found
CVE-2024-37065
Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously crafted model to run arbitrary code on an end user's system when loaded...
CVE-2024-37065
Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously crafted model to run arbitrary code on an end user's system when loaded...
CVE-2024-37065
CVE-2024-37065 : The vulnerability affects the Python library skops (version 0.6 and later). It stems from unsafe/deserialization of untrusted data, allowing a maliciously crafted model to trigger arbitrary code execution when loaded on a user system. The available documents confirm the affected ...