CVE-2024-48063
CVE-2024-48063 is a Deserialization RCE (Remote Code Execution) vulnerability found in PyTorch versions 2.4.1 and earlier within the RemoteModule. Although disputed as intended behavior in PyTorch distributed computing, it poses a risk. With an SVRS of 38, while not critical, the presence of active exploits and the "In The Wild" tag indicate a heightened potential for malicious use. This means attackers could potentially execute arbitrary code remotely by exploiting deserialization flaws. While the CVSS score is 0, the SVRS highlights that real-world risk goes beyond the theoretical. Organizations using affected PyTorch versions should carefully assess their risk and consider mitigation strategies, particularly where distributed computing features are exposed to untrusted networks. Ignoring this vulnerability, despite its disputed nature, could expose systems to unauthorized access and control.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.