repository icon
apache / tvm Project repository

Open deep learning compiler stack for cpu, gpu and specialized accelerators

Submit a report

FIRST INTERACTION

WITHIN30 DAYS

REVIEW

WITHIN22 DAYS

FIX

WITHINN/A DAYS

Remote Code Execution via Distributed RPC Server XGBoost Model Load
sukhawarring
duplicate
Critical
Arbitrary Code Execution via Insecure Deserialization in popen_worker and pickle...
finddabugs
duplicate
High
Command injection in Hexagon simulator launcher via unsafe workspace path
adi783885
self closed
Arbitrary Code Execution via Pickle Cache Poisoning in pickle_memoize
tranhoangtu-it
duplicate
High
Arbitrary code execution via pickle cache poisoning in pickle_memoize.py
wernerina
duplicate
None
RCE via cloudpickle.loads() in popen worker/pool and pickle.load() in cache file...
nhomyk
duplicate
Critical
Arbitrary Code Execution via numpy.load(allow_pickle=True) in XGBModel and Rando...
odysseypro25-project
duplicate
High
Unsafe torch.load() in MLPModel.load() Enables RCE via Malicious Cost Model Arch...
odysseypro25-project
self closed
Unsafe torch.load() and np.load(allow_pickle=True) in TVM MLP Cost Model Enables...
odysseypro25-project
self closed
Path traversal in RPC file upload/download allows arbitrary file read/write on s...
eistee82
self closed
Arbitrary code execution via unsafe pickle.load, torch.load, and np.load(allow_p...
elucidator-hky
self closed
Multiple integer overflows in TVM runtime: shape multiplication in GetDataSize a...
avienma007
self closed
Multiple Unsafe Deserialization Vulnerabilities (pickle.load, torch.load, np.loa...
shima-coder
duplicate
High
Arbitrary Code Execution via Unsafe torch.load() in MSC Codegen
loris4py
duplicate
High
Remote Code Execution (RCE) via Insecure Pickle Deserialization in pickle_memoiz...
sebas5207418
duplicate
High
Insecure Deserialization via np.load(allow_pickle=True) and pickle.load() in Cos...
jhacksman
duplicate
High
1️⃣ Security Vulnerability Report
agentalphax
duplicate
High
Apache TVM FoldConstant Pass Compile-Time Arbitrary Code Execution (RCE)
mia-718ai
not applicable
TVM MinRPC Server Integer Overflow Leads to Heap Buffer Overflow RCE
mia-718ai
pending
TVM C Code Generator StringImmNode String Escaping Bypass Allows Code Injection
mia-718ai
pending
TVM UnrollLoop Pass Unbounded Code Expansion leads to Resource Exhaustion DoS
mia-718ai
self closed
Apache TVM verify_trace_roundtrip() Code Injection leading to Remote Code Execut...
mia-718ai
self closed
Stack Overflow in Apache TVM TensorIR Recursive AST Traversal Causes Denial of S...
mia-718ai
pending
Arbitrary Code Injection via Unvalidated c_symbol_prefix Parameter in PackImport...
mia-718ai
pending
Apache TVM RelaxToPyFuncConverter T.call_extern() Arbitrary Code Execution
mia-718ai
pending
TVM MSC Framework torch.load(weights_only=False) Remote Code Execution
mia-718ai
duplicate
High
Denial of Service
mia-718ai
pending
Apache TVM Relax IR ExprVisitor/ExprMutator Uncontrolled Recursion Stack Overflo...
mia-718ai
pending
Inclusion of Functionality from Untrusted Control Sphere
mia-718ai
pending
Apache TVM scatter_elements Out-of-bounds Write via Unvalidated Index
mia-718ai
not applicable
Out-of-bounds Write in TVM index_put Operation Due to Missing Index Bounds Check
mia-718ai
not applicable
Apache TVM take() Operation Out-of-Bounds Read via Unsafe Fast Mode
mia-718ai
not applicable
Unbounded JSON IR Deserialization and Structural Traversal Leads to Remote Denia...
hyperps
informative
High
Command Injection in tvm.contrib.msc.core.codegen.CodeGen via crafted graph name
boszboll
not applicable
Remote Code Execution via Unsafe torch.load() and np.load() in MLPModel Cost Mod...
jonnylitten
informative
High
RPC Proxy Security Bug Fix - Weak Keys and Default Web Bindings
7908837174
informative
Critical
Vulnerability to DoS Attacks Due to Lack of Timeouts in Requests
freedom-of-the-mind
informative
High
TVM RPC infrastructure allows arbitrary code execution when loading untrusted .t...
kerkroups
informative
Critical
Insecure Temporary File in Test Module
ralph13
self closed
TVM allows arbitrary loading of malicious remote SO library functions.
hexian2001
self closed
Local File Read (LFI) via download() RPC End Point
zpbrent
informative
High
Arbitrary File Delete via remove() RPC End Point
zpbrent
informative
Critical
Arbitrary File Write via upload() RPC End Point
zpbrent
informative
Critical
Use of Cryptographically Weak Pseudo-Random Number Generator
kr3ww
self closed
Command injection in get_skipped_tests_comment function
kr3ww
informative
High
Apache TVM presence command execution
laoquanshi
informative
Critical
Dependency confusion due to unsafe use of external pip indexes leads to RCE
mgamelot
informative
Critical
Apache TVM command execution vulnerability
laoquanshi
not applicable