Database/AI/ML frameworks & serving
ONNX (`download_model_with_test_data`): Arbitrary file overwrite from a crafted model archive
CVE-2024-5187AI/ML frameworks & servingcurated
Impact
Arbitrary file overwrite from a crafted model archive
Who can reach it
Customer-supplied model URL/archive
What to do
Upgrade; do not run model-zoo download helpers as root or with shared mounts
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.