cve.bz

internlm lmdeploy vulnerabilities in 2025, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 8.8CVE-2025-67729EPSS 0.5%

    LMDeploy is a toolkit for compressing, deploying, and serving LLMs. Prior to version 0.11.1, an insecure deserialization vulnerability exists in lmdeploy where torch.load() is called without the weights_only=True parameter when loading mod…

  2. 4.8CVE-2025-3163EPSS 0.4%

    A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection. It is possibl…

  3. 4.8CVE-2025-3162EPSS 0.3%

    A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function load_weight_ckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation le…