CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

CVE•added 2025/03/20 10:9 a.m.•1368 views

CVE-2024-9052

Summary: CVE-2024-9052 relates to a deserialization flaw in the vLLM project’s distributed training API. The issue enables remote code execution via unsafe deserialization of object bytes using pickle.loads() without sanitization, specifically within the vllm.distributed.GroupCoordinator.recv_obj...

9.7AI score

Exploits0