Pickle-Deserialization-Exploit-in-Transformers

Transformers 中的 pickle 反序列化漏洞利用 实验简介 介绍pickle 反序列化机制及其reduce攻击原理，复现 Hugging Face Transformers 库中的反序列化漏洞CVE-2024-3568，分析 Transformers 库中的安全隐患并提出安全加固的有效方案。详细内容参见实验PDF文档 。 （poc作者代码详见CVE-2024-3568或者authorinf 文件夹） 关键信息 1. 漏洞位置 TFAutoModel.loadrepocheckpoint 方法（Transformers ≤ v4.37.2） 2. 攻击原理 恶意检查点中的...

Arbitrary Code Execution

transformers is vulnerable to Arbitrary Code Execution. This vulnerability is due to the deserialization of untrusted data within the loadrepocheckpoint function in the TFPreTrainedModel class, where attackers can exploit the use of pickle.load on data from potentially untrusted sources to execut...

CVE-2024-3568

The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the "loadrepocheckpoint" function of the "TFPreTrainedModel" class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload,...

CVE-2024-3568: Deserialization of Untrusted Data

The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the loadrepocheckpoint function of the TFPreTrainedModel class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting...