Description
A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function load_weight_ckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| InternLM | LMDeploy | 0.7.0, 0.7.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | lmdeploy | <= 0.7.1 | — | GHSA-7vc5-mjwp-c8fq |
References
- VDB-303108 | InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization vdb-entry technical-description
- VDB-303108 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #542520 | InternLM lmdeploy <=0.7.1 Deserialization third-party-advisory
- https://github.com/InternLM/lmdeploy/issues/3255 issue-tracking
- https://github.com/InternLM/lmdeploy/issues/3255#issue-2918985270 exploit issue-tracking