~/products/open-mmlab/open-mmlab_mmdetection

pipeline liveDigest Docs

Open-Mmlab Mmdetection vulnerabilities

1 known vulnerability affecting open-mmlab/open-mmlab_mmdetection.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2024-12044P2CRITICALCVSS 9.8≥ unspecified, ≤ latest2025-03-20

CVE-2024-12044 [CRITICAL] CWE-502 CVE-2024-12044: A remote code execution vulnerability exists in open-mmlab/mmdetection version v3.3.0. The vulnerabi A remote code execution vulnerability exists in open-mmlab/mmdetection version v3.3.0. The vulnerability is due to the use of the `pickle.loads()` function in the `all_reduce_dict()` distributed training API without proper sanitization. This allows an attacker to execute arbitrary code by broadcasting a malicious payload to the distributed trainin

Open-Mmlab Mmdetection vulnerabilities | cvebase