PT-2024-16956 · Hugging Face · Huggingface/Transformers

The_Kernel_Panic · Published 2024-11-19 · Updated 2025-12-29 · CVE-2024-11393

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hugging Face Transformers MaskFormer Model (affected versions not specified)

Description This issue involves the deserialization of untrusted data within the Hugging Face Transformers MaskFormer Model, potentially leading to remote code execution. Successful exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The root cause is insufficient validation of user-supplied data during the parsing of model files, which allows for the deserialization of untrusted data. An attacker can exploit this to execute code within the context of the current user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-11393

GHSA-WRFC-PVP9-MR9G

PYSEC-2024-228

ZDI-24-1514

Affected Products

Huggingface/Transformers

References · 21

• https://zerodayinitiative.com/advisories/ZDI-24-1514 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-11393 · Security Note
• https://osv.dev/vulnerability/GHSA-wrfc-pvp9-mr9g · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-11393 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2024-228 · Vendor Advisory
• https://github.com/huggingface/transformers · Note
• https://github.com/huggingface/transformers/issues/34840 · Note
• https://github.com/huggingface/transformers/pull/35296 · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2024-228.yaml · Note
• https://twitter.com/HackingTeam777/status/1866450132797141243 · Twitter Post
• https://twitter.com/TheZDIBugs/status/1858915711130673381 · Twitter Post
• https://t.me/cybersecuritytechnologies/11533 · Telegram Post
• https://twitter.com/dailycve/status/1862208136750223759 · Twitter Post
• https://reddit.com/r/vulnintel/comments/1gv5hnj/new_rce_vulnerabilities_in_hugging_face · Reddit Post
• https://twitter.com/dailycve/status/1861903982572237295 · Twitter Post