CVE-2024-0936 MEDIUM

CVE-2024-0936: van_der_Schaar LAB TemporAI PKL File load_from_file deserialization

Vendor Van_Der_Schaar Lab
Product TemporAI
Weakness CWE-502 · Unsafe deserialization
Published January 26, 2024
Last update August 27, 2024
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability classified as critical was found in van_der_Schaar LAB TemporAI 0.0.3. Affected by this vulnerability is the function load_from_file of the component PKL File Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252181 was assigned to this vulnerability. NOTE: The vendor was contacted early and confirmed immediately the existence of the issue. A patch is planned to be released in February 2024.

Key dates

02Disclosure timeline

January 26, 2024 CVE published
August 27, 2024 Record updated