CVE-2024-3660

Publication date

2024-04-16 20:09:26

Family

certcc

State

PUBLISHED

Description

A arbitrary code injection vulnerability in TensorFlows Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application.