CVE-2025-3162

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement...

CVE-2025-3162

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement...

CVE-2025-3162 InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement...

CVE-2025-3162

CVE-2025-3162 affects InternLM LMDeploy (up to 0.7.1). Affected is the function load_weight_ckpt in lmdeploy/lmdeploy/vl/model/utils.py (PT File Handler). The underlying issue is insecure/deserialization of inputs, enabling a local attacker to manipulate deserialization. Attacking locally is a re...

CVE-2025-3162 InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement...

CVE-2025-3162 InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement...

lmdeploy security vulnerability

lmdeploy is an InternLM open source toolkit for compressing, deploying and serving LLM. A security vulnerability exists in lmdeploy version 0.7.1 and earlier, which stems from a deserialization issue in the PT file handling component...

PT-2025-14770

Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions up to 0.7.1 Description A critical issue was found in InternLM LMDeploy, affecting the function load weight ckpt of the file lmdeploy/lmdeploy/vl/model/utils.py in the component PT File Handler. The manipulation lead...

PT-2025-14771

Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions up to 0.7.1 Description A critical vulnerability was found in InternLM LMDeploy, affecting the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection, and it is possible to launc...

lmdeploy security vulnerability

lmdeploy is an InternLM open source toolkit for compressing, deploying and servicing LLM. A security vulnerability exists in lmdeploy version 0.7.1 and earlier, which stems from a code injection issue...

CVE-2025-3162: Deserialization of Untrusted Data

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement...

CVE-2025-3163: Improper Control of Generation of Code

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit has...

lmdeploy (0.0.14) potentially affected by CVE-2024-8966 via gradio (4.0.0b15)

gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-8966 Source advisory: OSV:GHSA-5CPQ-9538-JM2J...

lmdeploy (0.0.14) potentially affected by CVE-2024-12217 via gradio (4.0.0b15)

gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-12217 Source advisory: OSV:GHSA-PRPG-P95C-32FV...

lmdeploy (0.0.14) potentially affected by CVE-2025-23042 via gradio (4.0.0b15)

gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2025-23042 Source advisory: OSV:PYSEC-2025-118...

lmdeploy (0.0.14) potentially affected by CVE-2025-23042 via gradio (4.0.0b15)

gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2025-23042 Source advisory: OSV:GHSA-J2JG-FQ62-7C3H...

lmdeploy (0.0.14) potentially affected by CVE-2024-47872 via gradio (4.0.0b15)

gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-47872 Source advisory: OSV:PYSEC-2024-220...

lmdeploy (0.0.14) potentially affected by CVE-2024-47870 via gradio (4.0.0b15)

gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

lmdeploy (0.0.14) potentially affected by CVE-2024-47871 via gradio (4.0.0b15)

gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-47871 Source advisory: OSV:PYSEC-2024-219...

lmdeploy (0.0.14) potentially affected by CVE-2024-47867 via gradio (4.0.0b15)

gradio PYPI version 4.0.0b15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lmdeploy 0.0.14 Source cves: CVE-2024-47867 Source advisory: OSV:PYSEC-2024-216...