Remote Code Execution With Modern AI/ML Formats and Libraries
Vulnerabilities in three AI/ML Python libraries (NeMo, Uni2TS, FlexTok) from NVIDIA, Salesforce, and Apple allow for remote code execution when loading malicious model files, with fixes released by all vendors.