Skip to content
OpenAdvisories

Product · Fujitsu Research

OneCompression

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.8

    Fujitsu OneCompression < 1.2.1 Arbitrary Code Execution via torch.load Deserialization

    Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.load_quantized_model_pt() uncondit…