Skip to content
NewA calmer, faster ZeroHour
Vulnerability3

CVE-2024-50050

CVSS 3.1
6.3 medium
EPSS
<1%p57
Published
·
Modified
Analyze CVE-2024-50050 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a serialization format for socket communication, potentially allowing for remote code execution. Socket communication has been changed to use JSON instead.

Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news

2 stories