ZDI discloses 0-day RCE in Meta FAIRChem NPZ file parsing
make_submission_file can deserialize untrusted NPZ data into code execution; ZDI scores it 7.8.
1 stories, newest first · one card per story
make_submission_file can deserialize untrusted NPZ data into code execution; ZDI scores it 7.8.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views