CVE-2024-49361

CVSS V2 None CVSS V3 None
Description
ACON is a widely-used library of tools for machine learning that focuses on adaptive correlation optimization. A potential vulnerability has been identified in the input validation process, which could lead to arbitrary code execution if exploited. This issue could allow an attacker to submit malicious input data, bypassing input validation, resulting in remote code execution in certain machine learning applications using the ACON library. All users utilizing ACON’s input-handling functions are potentially at risk. Specifically, machine learning models or applications that ingest user-generated data without proper sanitization are the most vulnerable. Users running ACON on production servers are at heightened risk, as the vulnerability could be exploited remotely. As of time of publication, it is unclear whether a fix is available.
Overview
  • CVE ID
  • CVE-2024-49361
  • Assigner
  • GitHub_M
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-10-18T18:55:42.604Z
  • Last Modified Date
  • 2024-10-18T20:41:16.532Z
References
Reference URL Reference Tags
https://github.com/torinriley/ACON/security/advisories/GHSA-345g-6rmp-3cv9 x_refsource_CONFIRM
History
Created Old Value New Value Data Type Notes
2024-10-19 13:18:46 Added to TrackCVE