EUVD-2025-7029

Malicious code in bioql PyPI...

CVE-2024-12044

CVE-2024-12044 : Concrete details in connected documents show a remote code execution vulnerability in open-mmlab/mmdetection v3.3.0 caused by unsafe use of pickle.loads() inside the all_reduce_dict() distributed training API. An attacker can execute arbitrary code by broadcasting a malicious pay...

CVE-2024-12044 Remote Code Execution by Pickle Deserialization in open-mmlab/mmdetection

A remote code execution vulnerability exists in open-mmlab/mmdetection version v3.3.0. The vulnerability is due to the use of the pickle.loads function in the allreducedict distributed training API without proper sanitization. This allows an attacker to execute arbitrary code by broadcasting a...