CVE-2024-12044

A remote code execution vulnerability exists in open-mmlab/mmdetection version v3.3.0. The vulnerability is due to the use of the "pickle.loads" function in the "allreducedict" distributed training API without proper sanitization. This allows an attacker to execute arbitrary code by broadcasting ...

PT-2025-12116

Name of the Vulnerable Software and Affected Versions open-mmlab/mmdetection version v3.3.0 Description A remote code execution issue exists due to the use of the pickle.loads function in the all reduce dict distributed training API without proper sanitization, allowing an attacker to execute...

CVE-2024-12044: Deserialization of Untrusted Data

A remote code execution vulnerability exists in open-mmlab/mmdetection version v3.3.0. The vulnerability is due to the use of the pickle.loads function in the allreducedict distributed training API without proper sanitization. This allows an attacker to execute arbitrary code by broadcasting a...