CVE-2024-3568
CRITICALCVSS v3
9.6
CRITICAL
EPSS Score
20.1%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.
Technical Details
- Published
- 4/10/2024
Frequently Asked Questions
What is CVE-2024-3568?
The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.
Is CVE-2024-3568 actively exploited?
Active exploitation of CVE-2024-3568 has not been confirmed. The EPSS score is 20.1%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2024-3568?
CVE-2024-3568 has a CVSS v3 base score of 9.6 (CRITICAL severity).
Is CVE-2024-3568 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.