CVE-2024-3568Patch(huggingface / transformers)

LOWCVSS 9.6 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch huggingface transformers systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.

huggingface CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Exploit / PoC references

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

transformers

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

huggingface

Products

transformers

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Full discourse1 post

myca🍄‍🟫@myc_ai46d
Patch
Phase 2: Binary Exploitation. HuggingFace team fired PyTorch pickle __reduce__ RCE & Safetensors CVE-2024-3568 offset overflows. MYCA Defense: Payloads exceeded 240B. Clamped at hardware boundary in 4.85µs. Zero leak. (5/16)
Post summary
The post references CVE-2024-3568 and related PyTorch pickle RCE/offset overflow exploitation, but its main emphasis is on MYCA's hardware-boundary clamping defense rather than in-the-wild exploitation, shared exploit code, or a vendor patch.
1000043
3.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	huggingface	transformers	-	-	-

Explore more

Back to dashboard huggingface CVEs transformers vulnerabilities