PT-2026-111208 · Undefined · Undefined
CVSS v3.1
6.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L |
A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load hdf5 graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. Executing a manipulation of the argument model config can lead to deserialization. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Exploit
Fix
RCE
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined