Vendor
open-mmlab
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.8
Remote Code Execution by Pickle Deserialization in open-mmlab/mmdetection
A remote code execution vulnerability exists in open-mmlab/mmdetection version v3.3.0. The vulnerability is due to the use of the `pickle.loads()` function in the `all_reduce_dict()` distributed training API without proper sanitization. This allows an attacke…