repository icon
apache / tvm Project repository

Open deep learning compiler stack for cpu, gpu and specialized accelerators

Submit a report

FIRST INTERACTION

WITHIN8 DAYS

REVIEW

WITHIN12 DAYS

FIX

WITHINN/A DAYS

TVM RPC infrastructure allows arbitrary code execution when loading untrusted .t...
kerkroups
informative
Critical
Insecure Temporary File in Test Module
ralph13
self closed
TVM allows arbitrary loading of malicious remote SO library functions.
hexian2001
self closed
Local File Read (LFI) via download() RPC End Point
zpbrent
informative
High
Arbitrary File Delete via remove() RPC End Point
zpbrent
informative
Critical
Arbitrary File Write via upload() RPC End Point
zpbrent
informative
Critical
Use of Cryptographically Weak Pseudo-Random Number Generator
kr3ww
self closed
Command injection in get_skipped_tests_comment function
kr3ww
informative
High
Apache TVM presence command execution
laoquanshi
informative
Critical
Dependency confusion due to unsafe use of external pip indexes leads to RCE
mgamelot
informative
Critical
Apache TVM command execution vulnerability
laoquanshi
not applicable