th3-j0k3r/
coremltools-torch-load-rce-poc

Name: coremltools-torch-load-rce-poc
Availability: InStock

like

0

Views

No views yet

Security Research PoC — coremltools SKMPalettizer torch.load() RCE

Demonstrates unsafe torch.load() in coremltools/optimize/torch/palettization/sensitive_k_means.py:649

python

import torch
torch.load('sensitivity.pt')
# Prints: [VULNERABLE] coremltools torch.load() RCE:
# uid=501(user) gid=20(staff) ...