Meta FAIRChem process_mlrs deserialization flaw allows remote code execution
Original title: ZDI-26-802: Meta FAIRChem process_mlrs Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-26-802 is rated CVSS 7.8 and requires opening a file or visiting a page.
The Zero Day Initiative published ZDI-26-802, a deserialization-of-untrusted-data flaw in the process_mlrs component of Meta FAIRChem. Remote attackers can execute arbitrary code if a user opens a malicious file or visits a malicious page. ZDI assigned CVSS 7.8. The snippet lists no versions, fix, or CVE.
- Advisory identifier is ZDI-26-802.
- ZDI assigned a CVSS rating of 7.8.
- The target must visit a malicious page or open a malicious file.
- No affected versions, fixed release, or CVE is stated.
Impact: arbitrary code execution on FAIRChem installations
| Product | Affected |
|---|---|
| Meta FAIRChem | — |
- Vendors
- Meta
- Products
- FAIRChem
- Organizations
- Zero Day Initiative
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.