Meta fairseq2 checkpoint loader deserialization flaw allows RCE (ZDI-26-939)
FileCheckpointManager _load_state_dict can run code from untrusted data; ZDI scores it 7.8.
1 stories, newest first · one card per story
FileCheckpointManager _load_state_dict can run code from untrusted data; ZDI scores it 7.8.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views