Deserialization of Untrusted Data in Hugging Face Transformers
GHSA-hxxf-235m-72v3 · CVE-2024-11394 · PYSEC-2024-229
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the handling of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25012.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-11394
- WEB https://github.com/huggingface/transformers/issues/34840
- WEB https://github.com/huggingface/transformers/pull/35296
- PACKAGE https://github.com/huggingface/transformers
- WEB https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2024-229.yaml
- WEB https://www.zerodayinitiative.com/advisories/ZDI-24-1515
Ready to move
Start Securing
Free, no credit card | First findings in minutes