CVE-2024-50050 — Meta Platforms, Inc / Llama Stack

CVE-2024-50050

Meta Platforms, Inc / Llama Stack PUBLISHED

Description (CNA)

Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a serialization format for socket communication, potentially allowing for remote code execution. Socket communication has been changed to use JSON instead.

Affected (CNA)

Vendor / product	Versions
Meta Platforms, Inc / Llama Stack	affected 0 before 7a8aa775e5a267cf8660d83140011a0b7f91e005

CWE

No CWE identifiers supplied.

References

https://www.facebook.com/security/advisories/cve-2024-50050

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.