PT-2023-32836 · Hugging Face · Transformers

Ydshieh · Published 2023-12-20 · Updated 2023-12-30 · CVE-2023-7018

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions huggingface/transformers versions prior to 4.36

Description The issue concerns the deserialization of untrusted data, which can compromise model integrity and potentially lead to remote code execution (RCE). This is particularly relevant when using the TransfoXLTokenizer() function, as it can automatically deserialize untrusted data. The vulnerability allows for malicious code injection, potentially through secondary repositories.

Recommendations For versions prior to 4.36, update to version 4.36 or later to resolve the issue. As a temporary workaround, consider disabling the TransfoXLTokenizer() function until a patch is available. Restrict access to untrusted data to minimize the risk of exploitation.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2023-7018

GHSA-V68G-WM8C-6X7J

PYSEC-2023-301

Affected Products

Transformers

References · 11

• 🔥 https://huntr.com/bounties/e1a3e548-e53a-48df-b708-9ee62140963c · Exploit
• https://github.com/huggingface/transformers/commit/1d63b0ec361e7a38f1339385e8a5a855085532ce · Patch
• https://osv.dev/vulnerability/GHSA-v68g-wm8c-6x7j · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2023-301 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-7018 · Security Note
• https://osv.dev/vulnerability/CVE-2023-7018 · Vendor Advisory
• https://github.com/huggingface/transformers · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2023-301.yaml · Note
• https://twitter.com/Checkmarx/status/1739911491954807231 · Twitter Post
• https://twitter.com/SoyGema/status/1739616746686832703 · Twitter Post
• https://twitter.com/CVEnew/status/1737513642902593675 · Twitter Post