CVE-2024-48063

Published Oct 29, 2024

Last updated 2 months ago

Overview

Description
In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed computing.
Source
cve@mitre.org
NVD status
Awaiting Analysis
CNA Tags
disputed

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-502

Social media

Hype score
Not currently trending

  1. CVE-2024-48063 In PyTorch &lt;=2.4.1, the RemoteModule has Deserialization RCE. https://t.co/wDvoTQgaNo

    @CVEnew

    29 Oct 2024

    251 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References