CVE-2024-12044

CVE-2024-12044 : Concrete details in connected documents show a remote code execution vulnerability in open-mmlab/mmdetection v3.3.0 caused by unsafe use of pickle.loads() inside the all_reduce_dict() distributed training API. An attacker can execute arbitrary code by broadcasting a malicious pay...