漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe deserialization by providing a specially crafted input file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
可信数据的反序列化
Vulnerability Title
NVIDIA Model Optimizer 代码问题漏洞
Vulnerability Description
NVIDIA Model Optimizer是美国英伟达(NVIDIA)公司的一个优化深度学习模型性能并提升推理效率的工具组件。 NVIDIA Model Optimizer存在代码问题漏洞,该漏洞源于ONNX量化功能存在不安全反序列化,可能导致代码执行、权限提升、数据篡改和信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A