Security Advisory

CVE-2025-3162

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-03 15:00:18

Last updated 2025-04-21 11:27:49

Assigner VulDB

State PUBLISHED

Description

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function load_weight_ckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

← Browse all CVEs View on cve.org ↗