repository icon
apache / tvm Project repository

Open deep learning compiler stack for cpu, gpu and specialized accelerators

Submit a report

FIRST INTERACTION

WITHIN32 DAYS

REVIEW

WITHIN20 DAYS

FIX

WITHINN/A DAYS

Remote Code Execution via Distributed RPC Server XGBoost Model Load
sukhawarring
duplicate
Critical
Arbitrary File Write/Read/Delete via Path Traversal in Apache TVM RPC Server
sucloudflare
duplicate
Critical
Arbitrary Code Execution via Insecure Deserialization in popen_worker and pickle...
finddabugs
duplicate
High
Path Traversal in TVM RPC Server Leads to Unauthenticated Remote Code Execution
jtjisgod
duplicate
Critical
Integer overflow in NDArray shape multiplication during model loading — heap o...
elliottower
pending
Unsafe np.load with allow_pickle=True in TVM cost model cache loading
manja316
pending
Integer Overflow in DataType::bytes() leading to Heap-based Buffer Overflow in N...
pushdev62-collab
pending
Command injection in Hexagon simulator launcher via unsafe workspace path
adithyanjkr
self closed
Integer overflow in Tensor::Load shape product leads to heap buffer overflow
arozanov
duplicate
High
Arbitrary Code Execution via eval()/exec() in TVMScript Parser with Empty Global...
tranhoangtu-it
pending
Arbitrary Code Execution via Pickle Cache Poisoning in pickle_memoize
tranhoangtu-it
duplicate
High
Arbitrary code execution via pickle cache poisoning in pickle_memoize.py
wernerina
duplicate
None
Integer overflow in tensor shape dimension multiplication leads to heap buffer o...
nhomyk
pending
Out-of-bounds read in Relax VM due to missing bounds check on register and const...
k-rintaro
pending
DoS + potential heap overflow via unvalidated ndim and unchecked shape multiplic...
kodareef5
duplicate
Medium
Arbitrary File Write via Tar Path Traversal in Model Loading and RPC Server
nhomyk
duplicate
Critical
Unsafe pickle.load() in pickle_memoize cache allows code execution via poisoned...
scruge1
pending
Path traversal via unsafe tar extraction in tvm.runtime.load_module() allows arb...
scruge1
duplicate
High
Predictable RPC authentication keys generated with insecure random.random()
nhomyk
pending
RCE via cloudpickle.loads() in popen worker/pool and pickle.load() in cache file...
nhomyk
duplicate
Critical
Direct Unauthenticated Remote Code Execution via `pickle.loads()` in TVM Disco `...
imhost00
pending
Arbitrary Code Execution via numpy.load(allow_pickle=True) in XGBModel and Rando...
odysseypro25-project
duplicate
High
Path Traversal in tar extraction allows arbitrary file write via malicious .tar...
elucidator-hky
duplicate
High
Unsafe torch.load() in MLPModel.load() Enables RCE via Malicious Cost Model Arch...
odysseypro25-project
self closed
Path Traversal in TVM RPC Server load_module via unsanitized relpath allows arbi...
luciusaskaner
pending
Unsafe torch.load() and np.load(allow_pickle=True) in TVM MLP Cost Model Enables...
odysseypro25-project
self closed
Path traversal in RPC file upload/download allows arbitrary file read/write on s...
eistee82
self closed
RCE via Unsafe Pickle Deserialization in TVM CutlassConv2DProfiler
theoddesseyp-ai
pending
Unauthenticated RCE via pickle.loads in Disco RPC and Path Traversal in RPC file...
narrator3333-hash
pending
Arbitrary code execution via unsafe pickle.load, torch.load, and np.load(allow_p...
elucidator-hky
self closed
RCE via RPC-exposed _import_python_module and unsafe pickle deserialization in c...
odysseypro25-project
pending
Remote Code Execution via Path Traversal in TVM RPC Server
cardosource
duplicate
Critical
Unsafe deserialization via pickle.load in TVM model export and RPC
etwithin
pending
Unchecked Attacker-Controlled Allocation Size in VM Executable Deserialization
echoplex71
pending
Multiple integer overflows in TVM runtime: shape multiplication in GetDataSize a...
avienma007
duplicate
Critical
Multiple integer overflows in TVM runtime: shape multiplication in GetDataSize a...
avienma007
self closed
utils.TempDirectory.relpath
nusedsec
duplicate
Critical
Integer Underflow and Out-of-Bounds Read in DeserializeModuleFromBytes() via Mal...
shima-coder
pending
TAR Path Traversal in Model Loading via untar() Enables Arbitrary File Write fro...
shima-coder
pending
Multiple Unsafe Deserialization Vulnerabilities (pickle.load, torch.load, np.loa...
shima-coder
duplicate
High
Integer Overflow in Tensor::Load() Shape Multiplication Enables Heap Buffer Over...
shima-coder
duplicate
High
OS Command Injection via subprocess.call(shell=True) in MSC pack/unpack_folder
wernerina
duplicate
High
Arbitrary Code Execution via SourceFileLoader in MSC load_callable()
wernerina
pending
Cleartext Storage of Sensitive Information due to Application backup allowed
prodigysec
pending
Arbitrary Code Execution via Unsafe torch.load() in MSC Codegen
loris4py
duplicate
High
TensorCache arbitrary heap read via unvalidated byte_offset and nbytes from JSON...
iiviel
pending
TensorCache bf16 decode heap overflow WRITE via odd nbytes truncation
iiviel
pending
Sub-byte DLDataType size miscalculation causes heap overflow WRITE in Tensor::Lo...
iiviel
pending
Command Injection in MSC pack_folder/unpack_folder via shell=True — apache/tvm
juliangums
duplicate
High
Remote Code Execution (RCE) via Insecure Pickle Deserialization in pickle_memoiz...
sebas5207418
duplicate
High
OS Command Injection via subprocess.call with shell=True in TVM MSC Utility Func...
galanzi2580-wq
pending
Insecure Deserialization via np.load(allow_pickle=True) and pickle.load() in Cos...
jhacksman
duplicate
High
1️⃣ Security Vulnerability Report
agentalphax
duplicate
High
Apache TVM FoldConstant Pass Compile-Time Arbitrary Code Execution (RCE)
mia-718ai
not applicable
TVM MinRPC Server Integer Overflow Leads to Heap Buffer Overflow RCE
mia-718ai
pending
TVM C Code Generator StringImmNode String Escaping Bypass Allows Code Injection
mia-718ai
pending
TVM UnrollLoop Pass Unbounded Code Expansion leads to Resource Exhaustion DoS
mia-718ai
self closed
Apache TVM verify_trace_roundtrip() Code Injection leading to Remote Code Execut...
mia-718ai
self closed
Stack Overflow in Apache TVM TensorIR Recursive AST Traversal Causes Denial of S...
mia-718ai
pending
Arbitrary Code Injection via Unvalidated c_symbol_prefix Parameter in PackImport...
mia-718ai
pending
Apache TVM RelaxToPyFuncConverter T.call_extern() Arbitrary Code Execution
mia-718ai
pending
TVM MSC Framework torch.load(weights_only=False) Remote Code Execution
mia-718ai
duplicate
High
Denial of Service
mia-718ai
pending
Apache TVM Relax IR ExprVisitor/ExprMutator Uncontrolled Recursion Stack Overflo...
mia-718ai
pending
Inclusion of Functionality from Untrusted Control Sphere
mia-718ai
pending
Apache TVM scatter_elements Out-of-bounds Write via Unvalidated Index
mia-718ai
not applicable
Out-of-bounds Write in TVM index_put Operation Due to Missing Index Bounds Check
mia-718ai
not applicable
Apache TVM take() Operation Out-of-Bounds Read via Unsafe Fast Mode
mia-718ai
not applicable
Unbounded JSON IR Deserialization and Structural Traversal Leads to Remote Denia...
hyperps
informative
High
Command Injection in tvm.contrib.msc.core.codegen.CodeGen via crafted graph name
boszboll
not applicable
Remote Code Execution via Unsafe torch.load() and np.load() in MLPModel Cost Mod...
jonnylitten
informative
High
RPC Proxy Security Bug Fix - Weak Keys and Default Web Bindings
7908837174
informative
Critical
Vulnerability to DoS Attacks Due to Lack of Timeouts in Requests
freedom-of-the-mind
informative
High
TVM RPC infrastructure allows arbitrary code execution when loading untrusted .t...
kerkroups
informative
Critical
Insecure Temporary File in Test Module
ralph13
self closed
TVM allows arbitrary loading of malicious remote SO library functions.
hexian2001
self closed
Local File Read (LFI) via download() RPC End Point
zpbrent
informative
High
Arbitrary File Delete via remove() RPC End Point
zpbrent
informative
Critical
Arbitrary File Write via upload() RPC End Point
zpbrent
informative
Critical
Use of Cryptographically Weak Pseudo-Random Number Generator
kr3ww
self closed
Command injection in get_skipped_tests_comment function
kr3ww
informative
High
Apache TVM presence command execution
laoquanshi
informative
Critical
Dependency confusion due to unsafe use of external pip indexes leads to RCE
mgamelot
informative
Critical
Apache TVM command execution vulnerability
laoquanshi
not applicable